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Abstract 

If g and h are functions over some field, we can consider their composition 
/ = g{h). The inverse problem is decomposition: given /, determine the ex- 
istence of such functions g and h. In this thesis we consider functional decom- 
positions of univariate and multivariate polynomials, and rational functions 
over a field F of characteristic p. In the polynomial case, "wild" behaviour 
occurs in both the mathematical and computational theory of the problem 
if p divides the degree of g. We consider the wild case in some depth, and 
deal with those polynomials whose decompositions are in some sense the 
"wildest" : the additive polynomials. We determine the maximum number of 
decompositions and show some polynomial time algorithms for certain classes 
of polynomials with wild decompositions. For the rational function case we 
present a definition of the problem, a normalised version of the problem to 
which the general problem reduces, and an exponential time solution to the 
normal problem. 
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Introduction. 

A fundamental idea in computer science and mathematics is that of compo- 
sition. One way to understand an object, whether it is abstract or concrete, 
is to understand how it combines with other objects of the same type. A 
converse problem to this also exists: Given an object, describe how it is 
made up as the composition of other objects. This is decomposition. We 
can introduce constraints on the decompositions we wish to examine. What 
happens when we cannot further break down the object under considera- 
tion given these constraints? We say it is indecomposable. A very natural 
question to look at is how an object under consideration breaks down into 
indecomposable pieces. And if we relax the constraints somewhat, do these 
indecomposable objects decompose once again? In mathematics, and espe- 
cially algebra, decomposition is a central concept. Decomposing matrices, 
algebras and groups are all well explored areas. The factoring of polynomials 
is a fundamental example of the decomposition in the ring of polynomials 
under the usual operations of addition and multiplication. The computa- 
tional aspects of factoring polynomials have been an extremely active area 
of research over the last two decades. But polynomials can also be com- 
posed functionally, and form a ring under addition and composition. What 
does factorisation in this ring look like? Although this question has been ad- 
dressed mathematically for at least six decades, many unresolved questions 
still remain. Computationally the area is extremely new, having developed 
only over the last decade or so. Applications of polynomial decomposition 
within the areas of coding theory and cryptography exist (though will not 
be dealt with here), and the problem is of computational interest in its own 
right. Though some progress has been made in the (mathematically) well 
understood cases, the problem in general appears to be difficult. We will 
address ourselves to some of these difficulties. 

If fm, fm-1, ■ ■ ■ , fi are univariate polynomials over a field F of degrees 
rm, Tm-i-i ■ ■ ■ -iTi G N respectively, their functional composition 

f = Ufm-A- ■ ■ {Hh)) ■ ■ ■)) ^ F[X] 

has degree n — r^r^-i---ri, and can be computed in a straightforward 
manner. In this thesis we examine a converse problem. Namely, given / 
and Tm, . . . ,ri, determine if there exist polynomials /„, •••,/! G F[x\ such 
that deg/i = for 1 < i < m and / = /m(/m-i(- • • (/2(/i)) • • •))> and 
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if so, compute them. We call this the polynomial decomposition problem. 
When the problem is limited to decompositions into two composition factors 
of given degree, we call this the bidecomposition problem. A polynomial is 
considered to be indecomposable if there is no way to decompose it into non- 
trivial (degree at least two) composition factors. We also consider decom- 
positions into indecomposable composition factors, which we call complete 
decompositions. Further questions arise when we consider decompositions 
over arbitrary algebraic extension fields of the ground field, or absolute de- 
compositions. All these issues concerning decompositions have been dealt 
with mathematically since the seminal paper of Ritt[1922], which showed a 
very strong, "well behaved" structure for decompositions of polynomials over 
the complex numbers. Since then, the mathematical literature dealing with 
the problem has been extensive, though far from complete. The difficulty in 
the decomposition problem seems to be connected to the divisibility of the 
degrees by the characteristic p of the ground field. The "tame" case, where 
J9 = or p I for 1 < i < m is well understood. However, the "wild" case 
where p\ri for some i > 1 is still largely a mystery. It is this case in which 
we will be most interested. 

For some special classes of polynomials, decompositions in the wild case 
are well understood. One such class is the "additive" polynomials. These are 
the polynomials where only exponents which are powers of the characteristic 
p of the field have non-zero coefficients. In some sense they are the "wildest" 
polynomials (see von zur Gathen[1988]). The theory of additive polynomi- 
als was introduced in Ore[1933b], and will be presented here in some detail. 
Kozen and Landau[1986] give an (exponential time) reduction of the general 
decomposition problem to univariate factorisation, and give a formulation of 
this problem in terms of the action of Galois groups. This turns out to be 
somewhat simpler for decompositions of separable, irreducible polynomials 
(over arbitrary fields) than in the general case. And for irreducible polyno- 
mials over finite fields they give a complete description of the decomposition 
structure. 

Decompositions of multivariate polynomials have also been considered. 
Evyatar and Scott [1972] show a structure very similar to the univariate case. 
We consider decompositions of a multivariate polynomial / into a univariate 
polynomial g and a multivariate polynomial h. Completely analogous tame 
and wild cases exist, although even less is known about the wild case here 
than for univariate polynomials. 
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Computationally, polynomial decomposition has only been examined since 
1976 by Barton and Zippel[1976,1985]. They give a general algorithm (for 
both the tame and wild cases) which requires a factoring subroutine and an 
exponential number of field operations in the degree of the input polynomial. 
Over arbitrary ("computable") fields, the decomposition problem is undecid- 
able (sec von zur Gathcn[1988]). Kozcn and Landau[1986] exhibit an algo- 
rithm for the bidecomposition problem in the tame case which requires only 
a polynomial number of field operations in the input degree. For multivari- 
ate polynomials there is a similar situation. Fast algorithms which compute 
decompositions do exist in the tame case (see Dickerson[1987] and von zur 
Gathen[1987]). And in the wild case we present an algorithm to perform 
multivariate decomposition (in an exponential number of field operations). 
Some special classes of the wild case have also been dealt with: Kozen and 
Landau [1986] give a decomposition algorithm for irreducible, separable poly- 
nomials which requires a quasi-polynomial number of field operations in the 
degree of the input, and for irreducible polynomials over finite fields, their 
algorithm requires only a polynomial number of field operations in the input 
degree. 

This thesis is organised into six chapters. In chapter one we present a 
mathematical definition of the univariate decomposition problem and five 
different formulations of it. Each of these formulations has been used in the 
mathematical or computational literature, in various forms. Some were de- 
veloped for special cases, and some fall immediately from the problem defini- 
tion. We generalise these formulations and put them in a consistent language 
and context, showing their basic equivalence. We also define the multivariate 
problem in a similar manner, showing two basic, equivalent formulations. 

In chapter two, we present the computational approaches to polynomial 
decomposition which have been developed for both the wild and tame cases. 
These algorithms will be stated in terms of the formulation of the decompo- 
sition problem used, as developed in chapter one. We show that for certain 
"nice" families of polynomials (polynomials for which an efficient algorithm 
for decomposition into two composition factors of given degree exists, and 
for which such decompositions are unique) the problem of decomposing a 
polynomial into an arbitrary number of factors of given degree is reducible 
to the bidecomposition problem. Using a structure theorem of Evyatar and 
Scott [1972], we also exhibit an algorithm for decomposing multivariate poly- 
nomials (in both the tame and wild cases) over any field supporting a fac- 
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toring algorithm. 

In chapters three through five we introduce the additive polynomials, a 
class of polynomials with wild decompositions which are well understood. 
In chapter three we develop the theory of these polynomials with respect 
to the structure of their roots in their splitting fields. From this we gar- 
ner quasi-polynomial lower bounds on the number of decompositions (both 
decompositions into two factors and complete decompositions) of "simple" 
additive polynomials. This shows that any algorithm which produces all de- 
compositions of an arbitrary polynomial in the wild case cannot be expected 
to work in a polynomial number of field operations. In fact, we determine ex- 
actly the maximum number of decompositions of simple additive polynomials 
of a given degree. 

In chapter four the theory of Ore [1933a] , which describes non-commutative 
Euclidean rings, is developed for the additive polynomials. We extend this 
theory by further developing the relationship between different complete de- 
compositions of a given polynomial. We also show a number of results con- 
cerning the uniqueness of decompositions. Combining this formal structure 
with the algebraic structure from chapter three, we show a quasi-polynomial 
upper bound on the number of possible complete decompositions of additive 
polynomials in general. 

In chapter five we make use of the two previous chapters to develop al- 
gorithms for the decomposition of additive polynomials. We show that we 
can determine indecomposability in a polynomial number of field operations, 
and in fact can generate one complete decomposition. However, the only way 
method we know to find a decomposition into an arbitrary number of factors 
of given degrees is by finding all complete decompositions. Using the upper 
bound from chapter four, we get an algorithm requiring a quasi-polynomial 
number of field operations. Two large subclasses of the additive polynomials 
show more favourable results: the completely reducible additive polynomials 
and the similarity free additive polynomials. Decomposition algorithms re- 
quiring a polynomial number of field operations are shown in each case. We 
also show a quasi-polynomial time algorithm for the absolute decomposition 
of additive polynomials. This algorithm may well run in a polynomial num- 
ber of field operations, subject to a conjectured (but unproven) upper bound 
on the degrees of splitting fields of additive polynomials. This conjecture 
follows immediately from a much stronger (and also unproven) conjecture of 
Ore[1933b]. 
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In chapter six we define the rational function decomposition problem. We 
show a normalisation of this problem to a more a more uniquely defined form. 
We then show that the rational function decomposition problem is reducible 
to this normal rational function decomposition problem. Finally, we present 
an algorithm for solving the normal problem (in an exponential number of 
field operations in the input degree). 

In summary the main original results of this thesis are: 

(1) five equivalent formulations of the univariate decomposition problem 
and two formulations of the multivariate decomposition problem, 

(2) a reduction from the general problem of finding decompositions into 
an arbitrary number of factors of given degree to the bidecomposition 
problem, for certain "nice" families of polynomials, 

(3) an exponential time algorithm for decomposing multivariate polyno- 
mials (in both the tame and wild cases) over any field supporting a 
factoring algorithm, 

(4) a precise determination of the maximum number of decompositions of 
an additive polynomial (which is super-polynomial in the degree), giv- 
ing a super-polynomial lower bound on the number of decompositions 
of a given polynomial in the wild case, 

(5) a polynomial time algorithm for the complete decomposition of additive 
polynomials, and hence an algorithm for determining indecomposabil- 

ity, 

(6) a quasi-polynomial time algorithm for the decomposition of an additive 
polynomial into factors of given degrees, 

(7) polynomial time algorithms for the decomposition of two special classes 
of additive polynomials, the completely reducible additive polynomials 
and the similarity free additive polynomials, 

(8) a quasi-polynomial time algorithm for the absolute decomposition of 
additive polynomials, which could well run in polynomial time, subject 
to an unproven conjecture of Ore[1933b], 

(9) a definition of the rational function decomposition problem, as well as 
a normalised form of this problem, and a reduction from the general 
problem to the normal problem. 
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(10) a computational solution to the normal rational function decomposition 
problem, requiring an exponential number of field operations. 

Results 5 through 8 assume the existence of a polynomial time algorithm for 
factoring univariate polynomials. 



12 



Mark Giesbrecht 



1 Polynomial Decomposition 
1.1 Definition of the Problem 

Let F be an arbitrary field and K an extension field of F. A decomposition 
of a polynomial / e F[x] is an ordered sequence of polynomials fi e K[x] 
ioT 1 < i < m such that 

/ =/m(/m-l(---(/2(/l))---) 
= fm° fm-l O • ■ ■ O /2 O /l- 

U K = F then the decomposition is said to be rational. The polynomial / is 
considered to be (rationally) indecomposable if for any (rational) decompo- 
sition, all but one of the composition factors has degree one. If this is even 
true when K is allowed to be an algebraic closure of F, then / is absolutely 

indecomposable. 

Assume f = g o h where / e F[x] and g,h e K[x]. Assume also that a 
and c are the leading (high order) coefficients of / and h respectively. Then 

= {-g{cx + h{0))) o ^ 

a a c 

is a decomposition of a monic polynomial into two monic polynomials, the 

second of which has constant coefficient zero. Thus, without loss of generality, 

we can assume for any decomposition f = goh that /, g, and h are monic and 

h{0) = 0. Similarly, if / = o o • • • o /j^, we can assume that / G F[x] 

and fi e K[x] for 1 < i < m are monic and /^(O) = for 1 < i < m. Call 

any decomposition of this form a normal decomposition. 

Define the rational normal decomposition problem as follows. For any 

n, m e N, an ordered factorisation of n of length m is an m-tuple 

P = {rm^rm-u ■ ■ ■ ,ri) 
where e N and > 2 for 1 < i < m and 

n = 

l<i<m 

Let m G N \ {0} and let F be any field of characteristic p, where p is a prime 
number. Let = {/ G F[x] : f monic}. Define 

/ = fm ° fm-l O ■ ■ ■ O /l 



DECi 



if, (/m,/m-l,---,/l)) X {VfY 



where deg fi = ri and 
fi{0) = for 1 < i < m 



> . 
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The computational problem is, given / € and p as above, to decide 
whether there exist any 

(/n.,/m-l,---,/l)e(PFr 

such that 

(/, {fmJm-l,...Jl))eDEC^, 

and in the affirmative case, to compute one or all of them. 

The rational normal bidecomposition problem is a restriction of the above 
problem to ordered factorisations p = (r2, ri) of length two. Mathematically, 
this problem addresses many of the same questions as the general problem 
since we can always look at decompositions into two parts, and then continue 
recursively on the composition factors obtained. This problem has been ex- 
amined extensively in the literature, but many unresolved questions remain. 
Two basic cases emerge in the mathematical behaviour of the bidecomposi- 
tion problem. The "tame" case, when p | r2, is as its name might suggest, 
well behaved. Kozen and Landau[1986] observed that there exists at most 
one decomposition for any given / and p (this also follows from Fried and 
MacRae[1969a]). Furthermore, they showed it can be determined in poly- 
nomial time. As well, any normal decomposition of / will be rational in 
this case. This was shown for the case F = C by Ritt[1922], for all fields of 
characteristic zero by Levi [1942], and for the general "tame" case by Fried 
and MacRae[1969a]. 

The "wild" case, when p\r2, is much harder to deal with, both mathe- 
matically and computationally. Fields are exhibited over which the problem 
is undccidable in von zur Gathen[1988]. Decompositions are not necessar- 
ily unique as the following example shows (other examples can be found in 
Ore[1933b]). Let F = GF{5). Then 

f ^ x^"" +x^^ + x = (x^' + 3x^ + 2x) o {x^ + 3x) 

= (x^^ + Ax^ + 3x) o (x^ + 2x) 
= {x^^ +x)o {x^ + x). 

Here / has 3 distinct decompositions in DEC^^2 g-, . Also, in the "wild" case 
decompositions may not be rational. With F as above consider the polyno- 
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mial 

f = X^^ + + X 

— {x^ + ax) o (x^ + f3x) 
= x^^ + + a)x^ + af3x. 

It follows that a + = aP = 1, and the polynomial / has a decomposition 
of this form if and only if /3 is a root of = x^ — x + 1 E F[x]. But (/? has no 
roots in F, and hence / has monic normal decompositions only in algebraic 
extensions of F. It will be seen that even in small finite fields the number of 
bidecompositions of a given polynomial of degree n can be super-polynomial 
in n. Polynomial time decomposition algorithms for rational decompositions 
and for decompositions in algebraic extensions are known to exist only for 
certain classes of polynomials. 

The ring of polynomials F[x] under addition and composition is obviously 
without zero divisors. It is not a (left or right) Euclidean ring however, as 
right or left division with remainder oi f E F[x] hy g & F[x] makes sense 
only when the degree of g divides the degree of /. 

Let F = GF{4:), and let a; e F be a primitive cube root of unity. Consider 
the polynomial 

/ = {x*-xf e F[x]. 
Dorey and Whaples[1974] show 

/ = (x^ — x^ — x^ + x) o (x^ + coax + aco^) 

for any a E F. Hence left (compositional) division of / by (,x^ — — 
+ x) is not unique. A somewhat stronger statement can be made about 
(compositional) right division. Let F be an arbitrary field and K an extension 
field of F. 

Lemma 1.1. If f,h G F[x] and g e are nonzero of degrees n, r and s 
respectively, and f — g o h, then 

(i) g is uniquely determined by f and h, and 

(ii) geF[x]. 

Proof. 
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(i) Assume g' e K[x] is such that f = g' o h. Then 

— goh — g'oh 
^{g- g') o h, 

and as F[x] under composition has no zero divisors, this imphes that 

9 = g'- 

(ii) The coefficients of / are fC-hnear combinations of the coefficients of 
for 1 <i <r. The coefficients of / and /i* are in F, so the coefficients 
of g are a solution to a system of hnear equations over F. Since such a 
system has a solution in F if it has one over and g is unique by (i), 
the coefficients of g are in F and g & F[x\. □ 

Further structure can be derived about the fields over which decomposi- 
tions exist. Let F be a field and let F be a fixed algebraic closure of F. 

Lemma 1.2. Let f,g,h G F[x] have degrees n,r, and s respectively and 
f — goh. Assume f has splitting field K C F. Then g splits over K and for 
each root a e K of g, h — a splits over K. 

Proof. Assume 

9- n (^-A) 

l<i<r 

where Pi e F ior 1 < i < r. Then 

/= n (^-A). 

l<i<r 

Let ^ = Pi for some i G N with 1 < i < r. If a G F is a root of /i — 7, then a 
is a root of /. Hence a E K and /i — 7 splits over K. Since 7 is the product 
of the roots of /i — 7, 7 G i^. Therefore, g splits over K as well. □ 

This theorem implies a number of interesting facts about decompositions 
over extensions of the ground field. 

Corollary 1.3. Let F he an arbitrary field and L ^ F an extension field. 
Let f G F[x] be monic of degree n with splitting field K. Then, if f is 
indecomposable in K, f is indecomposable in L. 
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Proof. Suppose f = g o h for some g,h & L[x] whose degrees are at least 
two. Then, by lemma 1.2, g splits in K, so g E K[x]. Let 7 G -ftT be a root 
of g. Then /i — 7 splits over K (also by lemma 1.2) and h e K[x]. But / is 
indecomposable over K and we get a contradiction. □ 

Decomposition over an arbitrary field extension (or decomposition in the 
splitting field as just shown) is called absolute decomposition. We will see in 
theorem 2.8 that over many fields F there are polynomials / G F[x] whose 
splitting fields are of degree exponential in n over F. Over infinite fields F 
von zur Gathen [1987a] showed that there exist polynomials of degree n such 
that the coefficients of an absolute decomposition generate a field extension 
of degree exponential in n over F. It is conjectured that such examples exist 
over finite fields as well. 



1.2 Decomposition and the Subfields of F{x). 

The decompositions of a polynomial f E F[x] have a strong correspondence 
with the lattice of subfields between F{f) and F{x), where F{x) is an al- 
gebraic extension over F{f) of the same degree as the degree of / (see van 
der Waerden[1970] section 10.2). This was first examined by Levi[1942] and 
later by Fried and MacRae[1969a,b]. Let n G N and p = (rm,rm-i, • • • ,^1) 
be an ordered factorisation of n. Let L be the set of all subfields of F{x). 
Define 



FIELDS^ = <^ 



(/, (F^,...,Fi)) GPi.xL'^ 



F^ = F{f), Fo = F{x), 

Fm ^ Fm-1 ^ ■ ■ ■ C Fi C Fq, 

[F,_i : F,] = l<i<m 



where [Fj_i : F,] is the algebraic degree of Fj_i over F,. 

Let / G F[x\ be of degree n. Also, let (/, {fm, fm-i, ■ ■ • ,/i)) e DEC^ 
and for 1 < i < m let hi = o o ■ ■ ■ and Fj = F[hi), the field F with 
adjoined. Define : DEC^ ^ FIELDS^ by (/, (/„, U-i, ■ ■ • , /i)) ^ 
(/, {Fm, Fm-i, Fi)). This is a map into FIELDS^ by the fact that [Fi_i : 
Fi] = Vi. 

Theorem 1.4. F^ is a bijection. 

Proof. Different decompositions give rise to different chains of fields because 
for any hi,h'^ G F[x], F{hi) = F{h'j) if and only if hi = ah[ + b for some 



Functional Decomposition of Polynomials 



17 



a,b E F, a 0. If hi,h'i G F[x] are monic with hi{0) = h[{0) = 0, this 
imphes hi = h\. Thus is injective. 

Showing that V° is surjective is somewhat less trivial Let / e F[x] be 
monic of degree n. Then F{x) is a finite extension of F[f) of degree n. Let 
L be a field such that F{f) C L C F{x). Then L = F{h) for some h G F{x). 
Since generates L over F and f E f = g oh ioi some 5' G F[x\. Thus /i 
is a root of / — ^f^/) G F(a;)[|/]. Since / — g{y) is also in F[x, y], all roots in 
F{x) must be in F[x\ (see van der Waerden[1970] section 5.4) and h G F[x\. 
As F(a/i + 6) = F{h) for a,b E F and a 0, we can assume is monic with 
h{0) = 0. Assume h' G -F[a;] is also monic with h'{0) = and L = F{h'). 
We know h' and /i have the same degree, that is [F{x) : L], and because 
h' G F{h), h' = ch + d for some c,d E F, c 0. But both are monic with 
constant coefficient zero, so h — h' and h is unique. Assume h has degree 
s. The field L is an algebraic extension of F{f) of degree r — n/s, and the 
degree oi g E F[x\ is r . 

Now assume (/, . . . , Fi)) G FIELDSf^. Let /i^ G F[a;] with 

hi{0) = be the unique monic generator of Fi as above. Because F{hi-i) ^ 
F{hi), we know hi = fi o hi-i, for some (unique) fi E F[x], for 1 < i < 
m. The degree of F{hi^i) over F{hi) is rj, so the degree of fi is rj. Be- 
cause / may have a non-zero constant term, f = h^ + c, where c E F 
is the constant term of /. As before, F{hm-i) ^ F{h„i) so there ex- 
ists a unique fm of degree such that hm = fm ° hm_\. Letting = 
fm + c, it follows that (/, (/„, /m-i, • • • , /i)) e DEC^. It is easily seen that 
r?(/,(/m,/m-i,-- ■,/!)) = (/,(-^m,-P'm-i,---,-^i)) and SO is surjective 
and hence bijective. □ 

Let / G F[x] be separable of degree n (ie. 7^ 0). In the separable 
case we can study the lattice of fields between F{f ) and F{x) by looking at 
the Galois group of F[x) relative to F[f). This was first done in Dorey and 
Whaples[1974] for the set of additive polynomials (a subset of F[x\ which 
will be dealt with in detail in a later section). As F{x) is not necessarily a 
normal, separable, extension of F{f), we construct the splitting field Q of 
the minimal polynomial of x over F(f). This minimal polynomial is 

^f{y)-f{y)-f^F{f)[y]^F{^)[y] , 

since we know that x has degree n over F{f) and x satisfies $/ which also has 
degree n. Because / is separable, $/ is separable, so the field f2 is a normal. 
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separable, extension of F{f) containing F{x). Let Qf = Ga\{Q/ F{f)), the 
Galois group of fl relative to F{f), and let <Z Q ^ he the subgroup fixing 
F{x) pointwise. Let G be the set of all subgroups of Qf. For n e N and 
P — {fm-i fm-i-i ■ ■ ■ -ifij-i an ordered factorisation of n, define 



GROUPS^ = (/, {g^, g,)) e X 



= gf, go = gx 

gm ^ ^m-l 5 • ■ ■ 5 ^1 5 ^0 

{gi : gi-i) =ri, 1 <i <r 



where {Qi : Qi-i) is the index of in g^. 

Let / G F[x] be separable of degree n and let (/, (F^, Fm-i, ■ ■ ■ , Fi)) e 
FIELDS^ . As above, let f2 be the splitting field of $/ and let ^/ = 
Gal{Q/F{f)). For 1 < i < m let C be the group of automorphisms 
fixing Fi pointwise. Define FJ : FIELDS^ ^ GROUPS^ by 

(/, (i^m, . . . , i^l)) ^ (/, (e^m, ^^m-l ■ ■ ■ , ^^l))- 

This map is simply the one described in the fundamental theorem of Galois 
theory (see van der Waerden[1970] section 8.1-8.3). 

Theorem 1.5. If f is separable then F^ is a bijection. 

Proof. By the fundamental theorem of Galois theory, there is an inclusion 

inverting bijection between fields between F{x) and F{f) and groups between 
g^; and gf. An automorphism group "H such that gx 'H gf corresponds 
to the field L such that F{x) ^ L ^ F{f) which it leaves fixed pointwise. 
Thus each chain of fields 

F{f) = C C . . . C Fi C F{x) 

corresponds uniquely to a tower of groups 

gf ^g-m^ 2 • • • 2 ^0 = ^x- 

Also by the fundamental theorem, {g^ : = : Fj] = r^. As F^ is 

exactly this Galois mapping, the fact that it is a bijection follows immedi- 
ately. □ 
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1.3 Separated Polynomials 

From the correspondence between decompositions and fields between F{f) 
and F{x) we get a useful structural result. This was originally due to 
Pried and MacRae[1969b] and was later extended to the multivariate case 
by Evyatar and Scott (this will be dealt with in a subsequent section). 
Fried and MacRac [1969b] introduce a more general version of the polyno- 
mials $/ = f{y) - f{x) e F{f)[y\ and = h{x) - h{y) e F{h)[y] pre- 
viously described. Let F be an arbitrary field with independent indetermi- 
nates x and y over F. A polynomial T e F[x, y] is said to be separated if 
T(x, y) = fi{x) — f2{y) where /i, /2 G F[x]. They then showed the following 
theorem linking separated polynomials with the simultaneous bidecomposi- 
tion of two polynomials with a common left composition factor: 

Fact 1.6. Let fi,f2,hi,h2 G F[x]. Then hi{x) - h2{y)\fi{x) - f2{y) if and 
only if there exists a polynomial g E F[x] such that f i = go hi and f2 = goh2. 

If we let /i = /2 and hi = h2 we immediately have the following corollary: 

Corollary 1.7. Let f,h & F[x] be monic of degrees n and s respectively 
with h{0) = 0. The following are equivalent: 

(i) There exists a g & F[x] such that f — g o h. 

(ii) ^h\^f- 

We can now apply this theorem to get another formulation of general 
decompositions. Let § = {h{x) — h{y) G F[x,y] : h G Pp}. Let n G N and 
P = i^m, f^m-i, . . . , Ti), an ordered factorisation of n. Also, let di = ni<j<i '"j- 
Define 



SEP^ = (/, ($^, ^rn-l ^l)) G X 



dcg^.$, =di,^m = '^f 

for 1 < i < m 



Let (/, ifm, fm-i, . . . , /i)) G DEC^ and, for 1 < i < m, let 

Ui = fiO fi_iO---o fi{x) - /i o o • • ■ o fi{y) e F[x, y]. 
By corollary 1.7, Ui\ui+i. Define the map : DEC^ SEP^ by 



(/, (/m,/m-l, •••,/!)) ^ (/, {Um,U^_i...,Ui)). 
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Theorem 1.8. is a bijection. 

Proof. As distinct decompositions will give a distinct sequences of Wj's for 
1 < i < m, this is an injective mapping from DEC^ to SEP^ . 

Now assume (/, {vm,Vm-i, ■ ■ ■,Vi)) G SEP^ where Vi{x,y) = gi{x)-gi{y) 
for 1 < i < m. By corollary 1.7, we know that for 1 < i < m, = o g^_i 
for some e of degree Thus (/, (/^, . . . , /s, /2, ^i)) e -D-BCj. 
Each member of SEP^ will be mapped to a different member of DEC^ so 
there is an injection from SEP^ to DEC^. This is obviously the inverse of 

, and so F^ is a bijection. □ 

1.4 Multidimensional Block Decompositions 

Kozcn and Landau[1986] developed another formulation of the bidecomposi- 
tion of a polynomial / G F[x] based on its Galois group Gf, and this group's 
action on the roots of / in its splitting field. The roots are partitioned by 
Of into blocks or systems of imprimitivity (see van der Waerden[1970], sec- 
tion 7.9). A necessary and sufficient condition in terms of these blocks is 
given for there to be a corresponding bidecomposition of /. We extend this 
formulation to general decompositions of / corresponding to a given ordered 
factorisation p. 

Let Uhe a, set. A multiset S over U is any map 5" : W — > N. An element 
a e W is an element of 5" (a e S) if and only if S{a) > 0. A multiset can be 
viewed as an extension of the characteristic function of a set. A multiset T 
is a submultiset of a multiset S {T C S) if for all a G T{a) < S{a). If 
a : U ^ U is a. map, we consider the multiset aS to be defined such that for 
all q; G W 

{aS){a) = m- 

The cardinahty of a multiset S is 

1^1 = S{a). 

At first reading, the reader is encouraged to think of multisets as sets S C.U 
(or equivalently, as the characteristic functions of sets); if the polynomial / 
to be decomposed is squarefree, indeed only such sets will occur. 
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We will sec that decompositions into, say, three composition factors, cor- 
respond in a natural way to certain "multisets of multisets of multisets of 
roots". We introduce these "typed" objects over some set U as follows. A 
multiset with one level overU is a multiset over U and, for i > 1, a multiset 
with i levels over W is a multiset over the set of multisets with i — 1 levels 
over U. Let i? be a multiset with m levels over U. A multiset C is a level k 
member of B if 

C e e • • • e Si e S. 

Notice that the structure of B imphes that C must be a multiset with m — k 
levels. C also has a natural multiplicity within B, namely 

B{B,) ■ B^{B2) ■ ■ ■ Bk-2{Bk-i) ■ Bk-,{C). 

This allows us to "flatten" the top k levels of B and speak of the multiset of 
all multisets at level £ in B. We denote this multiset with m — k + 1 levels 

as 

Let m G N and p = (r^, rm-i, ■ ■ ■ G N"^. A multiset B with m levels 
over W is a p- block if either 

(i) m — 1 and S is a multiset over U of cardinality ri, or 

(ii) m > 1 and 5 is a multiset with cardinality of {vm-i, Tm-2, • • • , ^"i)- 
blocks over U. 

Let Bi? be the set of all multisets with i levels over F for all i > 0, where F 
is a fixed algebraic closure of F. Define the set 



BLOCKS' 

5'^ 



(/, S) e X Mf 



S is a p-block over F such that ' 



/= n (^-«) 



Bl'"l(a) 



Let / G F[x\ be of degree n with splitting field K C F and Galois group 
Gf — Gal{K/F) and let p = (r^jT^-i, . . . ,ri) be an ordered factorisation 
of n. A p-block B over X is a p-block decomposition of / if 

(i) n (^-«)^""'^"\and 

(ii) for any a, /3 G -B'™' and a E Gf such that aa = /5, and for 1 < i < m 
and any C,D over K with G,D e B^^-'^ such that a G and /3 G D^'\ 
it is true that aCW = D^. 
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A p-block decomposition is said to be functional if there exist monic poly- 
nomials hi, /i2, . . . , hm-i e F[x] such that for 1 < i < m, hi{0) = and for 
all C e S'""-^! there exists a -fc e K such that 



Define 



n 



a 



,cM(a) 



FBLOCKSl = I (/, 5) e Pf X Bp 



S is a functional p-block 
decomposition of / 



Note that FBLOCKS^ C BLOCKS^. 

We now give an example of a p-block decomposition. Let p G N be prime 
and let F = GF{p). Let / G F[x] be irreducible of degree n — 12 with 
splitting field K = F[z]/{f) and Galois group Gf = Gal(ir/F) = {aj : 
X — )■ 



for < J < 12}. We will exhibit a block decomposition of / in 
BLOCKS^ , where p is the ordered factorisation (2,3,2). Since F is finite 

c K. First, we find 
Let B = {Co,Ci,...,C5}, 



and / is irreducible, / has roots {a, a 
a block decomposition 5 of / in B LOG K Sfa 



where Cj = {a^', q;^'^*^} for < i < 6. Condition (i) of the definition of a 
p-block trivially holds. If, for < A; < 12, a^ci^'' — a^''^^ — , then 

for < i,j,k < 12 since 



(6,2)- 



i + k = j mod 12 and UfcO;^*^^ = a 
i + 6 + k = j + 6 mod 12. Thus, condition (ii) in the definition holds as well. 
In a similar way we find that A = {Dq, Di} where Di = {q;^-'+* : < j < 5} 
for < i < 2 is a decomposition of / in BLOG KS^^ e)- Combining these two 
decomposition, it follows that 

E^{{{a,aP'},{aP\a^'},{a^\aP'°}} , {{a^ a^'}, {a^'', a*''}, {a*'', a^'"}}} 

is a block decomposition of / in B LOG K 8^22, 2)- 

We now proceed to describe a bijective map from DEG^ to FBLOGKS^ . 
We first define F° from DEG^ to BLOGKS^. We then show it is a map to 
FBLOGKS^, and finally that it is bijective. 

Once again, let ra,m G N and p = {rjn,rm-i, ■ ■ ■ ,ri), an ordered factori- 
sation of n. Also, let (/, fm-i, ■ ■ ■ j /i)) £ DEG^, where / G F[x] has 
splitting field K. We define the map F^ recursively as follows. If m = 1, let 



= a 
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B be the multiset of roots of /. It follows immediately that 5 is a p-block 
of the roots of / in K, so we let V%{f\ (/)) = (/, B). 

Now assume m > 1. We know f — fm ° ^m-i where h£ — o /^_2 o 
• • • o /i G for 1 < £ < m. Let be the multiset of roots of fm in K 
(we know they are in K by lemma 1.2). Then 

(xeDm 

For each a e D^, let = Vj^^hm-i - a, {fm-i - a, /m-2, /m-3, • • • , /i)), 
an (rm_i,rm-2, • • • ,ri)-block over K of the roots in K of hm-\ — a by the 
recursive definition. For each (r^_i, r^_2, . . . , ri)-block C over define the 
multiset B such that 

^(^(j^ _ I ^™('^) C = Ea for some a e D^, 
\ otherwise. 

B is the multiset of the E^s (for all a G -Dm) with appropriate multiplicity. 
This is a p-block over K of the roots of / and hence (/, B) G BLOCKS^. 
We therefore define r^(/, (/m, /m-i, ■ ■ ■ , fi)) = {f, B). We have completely 
described the map F^ : DEC^ BLOCKS^. 

Lemma 1.9. F° is a map from DEC^ to FBLOCKS^. 

Proof. Let (/, {fm, fm-i, ■■■Ji)) e DEC^ and let (/, B) be its image in 
BLOCKS^ under F°. It follows immediately that (/, -B) is functional from 
the definition of F^. We must also show that condition (ii) in the definition 

of p-block decomposition holds for {f,B). 

Assume a, P G -B'""' and a E Gf such that aa = (3. Let £ EN such that 
1 < £ < m and let C, G B^'^-'l We know 

n ix-af'^^^ =h, + ^, 

aecm 

n (a;-6)^'^'(^) =he + S, 
beDW 

for some 7, 5 G X by the definition of F^. Since 

=a{hfXa)+'y) 
= he{aa) + a^j 
= hiiP) + a J 
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and he{l3) + S = 0, we also know 5 = aj. Furthermore, since 

aeCW 
aeCW 

and 

a{hi + 7) = /i^ + 5 

there is a bijection between the hnear factors (over K) of /i^ + 7 and hi + 5. 
As there is a trivial bijection between the linear factors of a polynomial over 
its splitting field and the multiset of roots of that polynomial, crC'^' = D^^K 
Therefore is a map from DEC^ to F BLOCKS^. □ 

Theorem 1.10. is a bijection. 

Proof. F^ is an injection since each different decomposition gives a different 
sequence hi,h2, ■ ■ ■ , hm, and hence a different block decomposition. We now 
show it is also surjective by induction on m. Let (/, B) G FBLOCKS^ . If 
m = 1 then B is simply the multiset of roots of / and F^(/, (/)) = (/, B). 
Assume m is greater than one. Then 

n (^-«)^'""^"^ 

= n( n (a;-a)^"""''("))^(^) 

D&B a6Dl'"-il 

DeB 
DeB 

for some & K for each DeB. It follows that there exists a polynomial 
fm e K[x] such that 

= n - lof^''^ 

DeB 
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and / = frn o Kn-i- By lemma 1.1, G F[x] and this fm is unique. Now 
let C e 5 for any i with 1 < i < m. Then 

he — 5 for some (5 e X 

Dec a£DV-^ 

n (^^-1 - ^Df^""^ 

Dec 
Dec 

for some 7d G X for each D & C. So there exists a polynomial e ^[^] 
such that 

Dec 

and hi — 5 — ge o h^-i. Rearranging this, he — {ge + 5) o he-i and by lemma 
1.1, fe — ge + S e and this fe is unique. This shows he — fe o he-i for 
some uniquely determined G F[x] for 1 < £ < m. 

It follows that / = fm°fm-i°' ' ■°f3°f2°hi where fi G F[x] is monic of de- 
gree for 1 < i < m and deg hi = n. Therefore (/, {fm, fm-i, • • • , /a, /2, hi)) G 
DEC^ and r^,{f, (/^, . . . , /a, /s, hi)) = (/, 5). This means that is 
surjective and hence bijective. □ 



aeCW 



1.5 Chebyshev Polynomials 

The Chebyshev polynomials, Tj G C[x\ for i G N, are usually defined over the 
complex numbers by the identity 

Tj(cos6') = cos i9. 

Prom the trigonometric identity 

— 2 — ) 

we get 

cosi^ + cos((i - 2)6) = 2cos((i - 1)^) cos^ 
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and 



Ti{cos9) +Tj_2(cos^^) = 2cos6'Ti_i(cos6'). 
This gives the defining recurrence relation 







1, 



(i>l) 



so that 



T2 



- 1, 

- + 1, 



Note that Tj G Z[a;] for all i G N, so Chebyshev polynomials are in fact 
well defined (by this recurrence) in arbitrary fields of arbitrary characteris- 
tic, and have coefficients in the prime field of this characteristic. We will 
prove a number of useful theorems concerning Chebyshev polynomials over 
arbitrary fields. Obviously, no analytic properties of trigonometric functions 
have meaning in fields of positive characteristic, so we will not make use of 
any of these. 

If F has characteristic two, then 



Therefore Tj = 1 if Hs even and Tj = x if i is odd. 

Let F be any field of characteristic p 7^ 2, and for i G N, let Tj be the 
i*^ Chebyshev polynomial. A quick examination of the defining recurrence 
reveals that degTj = i. 

Theorem 1.11. 



To = 1, 

T,; = T, 



i-2 



for i > 2. 
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Proof. We will proceed by induction on i. Easily, the theorem holds for Tq 
and Ti. Assume it holds for Tj with < j < i. Then 

/ x + x-^ \ 
'I 2 j 



and the theorem holds for all Tj, i e N. □ 

Using theorem 1.11, we can show the following fact about the composition 
of Chebyshev polynomials over arbitrary fields F of characteristic p. 

Theorem 1.12. For i,j G N, o Tj = Tij = Tj o Tj. 

Proof. If F has characteristic two, then the theorem holds trivially. If the 
characteristic p of F does not equal two then, 

~ 2 

" n 2 ) 

From this identity in F[x), we conclude that Tj o Tj = Tij. □ 

In fields of characteristic p > 2, a useful theorem can be shown about the 
Chebyshev polynomials of degree for i > 1. 

Theorem 1.13. Let F he any Held of characteristic p > 2. For i e N, 

Tpi ^ x^ . 

Proof. By theorem 1.12, 

i times 

/ s 

Tpi = TpoTpO ■ ■ ■ oTp 



2 • 



X + X ^ ^ f X + X ^ 



2 

{x + x-'^) 
x^ + x"' 



+ x" 



T- 



X -\- X 



-V 



i-2 



-{i-iy 
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so it is sufficient to show 



p ~ 



x^. We know 




X + X' 



2 



-1 



) 



xP + x-P 
2 




From this identity in F{x), we conclude that Tp = xP. □ 

1.6 Complete Rational Decompositions 

A complete rational decomposition of a polynomial f & F[x] is of the form 



where each /j e F[x] is indecomposable and nontrivial (ie. with degree 
greater than one). A natural question to ask concerns the uniqueness of such 
decompositions. As we do not want to worry about affine linear transfor- 
mations of composition factors, we consider only complete rational normal 
decompositions where / is monic and fi G F[x] are monic for 1 < i < m and 
fi{0) = for 1 < i < m. 

Two types of ambiguous decompositions emerge. If w G F[x], then {x"^ ■ 
u'^)ox'^ = x^ o[x^ -ulx"^)) for m,r G N. Call this an exponential ambiguitj. As 
seen in the previous section, the Chebyshev polynomials Tj G F[x] for ? G N 
have the property that Tj o Tj = Tj o Tj. Call this a trigonometric ambiguity. 
Ritt[1922] showed that if F = C, all complete normal decompositions differ 
only by ambiguities of these two forms. Engstrom[1941] showed that in fields 
F of characteristic zero that 

(i) polynomials indecomposable over F are indecomposable over any alge- 
braic extension of F (ie. all decompositions are rational), and 

(ii) all complete normal decompositions differ only by trigonometric and 
exponential ambiguities. 

These two theorems are known as Ritt's first and second theorems. Fried 
and MacRae[1969a] showed them true when the characteristic of F is greater 
than the degree of the polynomial. 



f = fm° fm-1 O ■ ■ • O /2 O /l 
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For an arbitrary field F of cliaracteristic p tliis is not necessarily true. 
Dorey and Whaples[1974] give the following example of two complete rational 
decompositions of the polynomial / e F[x]: 

= O [x^ + x) O {x^ - x) 

= {x^' - x^''^+^ -x^ + x)o xP+\ 

The composition factor x^^ — x^'^'^'^^ — + x is indecomposable because the 
composition of two polynomials of degree p can never have a term of degree 
p^ — p + \. 

The various equivalent formulations to polynomial decompositions can 
be extended to complete decompositions in the obvious manner. Let p be 
an ordered factorisation of n of length m. Let cDEC^ C DEC^ be the set 
of complete decompositions of polynomials corresponding to ordered factori- 
sation p. The image of cDECf in FIELDS^, GROUPS^, SEP^, and 
FBLOCKS^ under the bijections described in this chapter will be called, 
respectively, cFIELDS^, cGROUPS^, cSEP^ and cBLOCKS^. Obvi- 
ously, any member of any one of these sets will correspond to a complete 
rational normal decomposition. 

The sets cFIELDS^ and cGROUPS^ have useful characterisations in 
their own right. If (/, F„,-i, . . . , Fi)) e cFIELDS^^, then 

F{f) = F„ C C . . . C Fi C F{x) 

is a maximal chain of fields. If a field did exist between Fj and Fj+i then /j+i, 
the i + I'st composition factor from the corresponding element 
(/) {fm, fm-i, ■ ■ ■ , /i)) G cD-^C'p , would be decomposable. In a similar fash- 
ion, if (/, {Gm, Qm-i: • • • , Gi)) G cGROUPS^, then 

Gx Q Gi Q ■ ■ ■ Q Gm-1 QGm^ Gf 

is a maximal tower of groups. 

When dealing with complete decompositions of a polynomial / G F[x], 
we often wish to deal with all decompositions of / regardless of the ordered 
factorisations to which they correspond. With this in mind we define 

cDEC^ = U cDEC^. 

per 
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where T is the set of all finite tuples of integers greater than one. Similarly we 
can define cFIELDS^ , cGROUPS^ , etc, and restate Ritt's second theorem 
in this context: For any monic / e F[x], all decompositions of / in cDEC^ 
are equivalent up to trigonometric and exponential ambiguities. 

1.7 The Number of Indecomposable Polynomials 

It can shown that "most" polynomials over an arbitrary field F are indecom- 
posable. This can be done using an algebraic dimension argument over an 
algebraically closed field and by a counting argument over a finite field. 

Let F be a field, and M C F[x\ be the set of monic polynomials with 
constant coefficient zero. Also, for n e N, let M„ = {/ e M | deg f — n} 
and for r, s e N with rs = n and g & and h G Mg, define a(r,s) : x 
Ms — > Mrs by a(^r,s){g,h) = g oh (ie. the composition function). Assume 
/ = I]o<i<n Oji^^ ^ wherc flj G F for < i < n. We define the map 
A„ : M„ — >■ F'^~^ by A„(/) = (a„_i, a„_2, . . . , ai). This is obviously a bijective 
map from M„ to F""^. Assume r and s are at least two and define ^(^,5) : 
F^~^xF*~^ F"~^by^(r,s) = A„oQ;(r s)o(A~^ x Aj^). This is the composition 
map in F"~^. Let 

D(r,s) = {M^, B) e F"-i I A e F'-\ B e F'-'} 

be the image of /3(r,s) iii F"~^. We will show that the "size" of F"^^ is "much 
larger" than the "size" of 

^= U Dir,s), 

rs=n 

the set of all decomposable polynomials in M„. Because we can normalise 
any decomposition, this is in fact a general statement about the number of 
indecomposable polynomials in F[x]. 

Consider the case where F is an algebraically closed field. For r, s G N 
with rs = n and r > 1, -D(r,s) (the Zariski closure of D(^r,s)) is an algebraic 
set of dimension at most r + s — 2. Therefore 

^ = U Dir,s) 

rs=n 
r,s>l 

has dimension at most 

— n 
max{dimZ}(r : rs — n, r, s > 2} < — 
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and this is less than the dimension n — 1 of F"^^. Therefore, over an arbitrary 
infinite field, "most" polynomials are indecomposable even over an algebraic 
closure of that field, in a strong algebraic sense. 

Turning to the case F — GF{q) where q — p^ for some prime number p and 
i e N, we can make a counting argument to show that only an exponentially 
small number of polynomials in F[x\ of degree n arc decomposable. For any 
ordered factorisation (r, s) of n with s > 1, we know i^D(^r,s) < q^'^^q'^~^ — 
Summing over all possible ordered factorisation (r, s) of n where 
s > 1, we get 

rs=n 

< rf(n)g2+"/2-2 . 

where d{n) is the number of divisors of n. From Hardy and Wright [1960] 
(theorem 317) we get d{n) < c^rf for any e > and some q > (depending 
on e). Fixing an e > 0, 

< c,q^ 

for some A; > 0. This shows that only an exponentially small fraction of the 
polynomials of degree n over GF{q) are decomposable. 

1.8 Multivariate Decomposition 

Let F be an arbitrary field and let x,xi, . . . ,xe,y,yi, . . . , ye be algebraically 
independent indeterminates over F for £ E N \ {0}. For convenience we write 
the sequences Xi, . . . ,X£ and yi, . . . ,yi as x and y respectively. For / e F[x], 
let deg / be the total degree of /. We will simply refer to this as the degree of 
/. For / e F[x\ of degree n, a decomposition of / is a pair {g, h) G F[x] xF[x\ 
such that f = g o h. Note that if g has degree r and h has degree s, then / 
has degree n = rs. For any a G -F, we have f = [g ^ {x + a)] o [[x — a) o h] 
so we can assume /i(0, . . . , 0) = 0. Let (r, s) be an ordered factorisation of n. 
For any positive integer £, define the set 
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If (/, {g, h)) e MDEC^l^ then for any aeF, (/, {g{ax), a-^h)) G MDEC^^y 
We say the two decompositions (/, (gf, /i)), and (/, {g{ax), a^^h)) are linearly 
equivalent. Removing hnearly equivalent decompositions from MDEC^f^^ 
and choosing a canonical representative from each equivalence class is not 
as natural as in the univariate case and will not be attempted here. Two 
different approaches to this problem will be presented when dealing with 
multivariate decompositions algorithmically. As in the univariate case we 
define the tame case to be when p \ r. In von zur Gathen [1987b] it is shown 
that in the tame case for any / e of degree n and any ordered factori- 
sation (r, s) of n, all decompositions of / (if any) in MDEC^f^-^ are hnearly 
equivalent. 

Evyatar and Scott [1972] show the following multivariate generalisation 
of the Pried and MacRae[1968a] theorem concerning separated polynomials 
(see section l.C). 

Fact 1.14. If /, /i G F[x\ then there exists a g & F[x] such that f = g o h if 
and only if h{x) - h{y)\f{x) - f{y). 

Define the set = {h(x) - h{y)\h G F[x\}. Also define 



M5^P(^;f) = <! (/, ($, *)) G F[x] X (W,)^ 



<^ = f{x)-f{y), 

deg $ = rs, deg ^ = r 



Considering fact 1.14, there is a map T^^ : MDEC[;^^^ MSEP^;ly 
Namely, for {f,{g,h)) G MDEC[;ly if,{g,h)) ^ (f,(f(S) - f{^,h{x) - 

Km- 

Theorem 1.15. is a bijection. 

Proof. Assume f,hE F[x] and g, g' G F[x] where h and f = g o h = 
g' o h. Then g o h — g' o h — {g — g') o h — and g — g' — 0. Thus 
g is uniquely determined by / and h and FjJ^^ is injcctive. Conversely, if 
(/, (fix) - fijj), h{x) - h{y))) G MSEP^;^^^ then by fact 1.14 there exists a 
g E F[x\ such that f = goh and the inverse map is also injective. Therefore, 
is a bijection. □ 
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2 Decomposition Algorithms 

The development of algorithms for the decomposition of polynomials has oc- 
curred relatively recently. Although related problems for power series were 
examined by Brent and Kung[1976,1977], polynomial decomposition algo- 
rithms (for univariate polynomials) were not truly examined until Barton 
and Zippcl[1976,1985]. Their algorithms require an exponential number of 
field operations (in the degree of the input polynomial) and work over any 
field which supports a factoring algorithm. Alagar and Thanh[1986] showed 
a similar algorithm which also requires an exponential number of field op- 
erations. The breakthrough came when Kozen and Landau[1986] developed 
a decomposition algorithm for the tame case which required a polynomial 
number of field operations (in the degree of the input polynomial) as well 
as giving a fast parallel algorithm. In von zur Gathen[1987] this result for 
the tame case was improved, and a very fast parallel algorithm was devel- 
oped. Kozen and Landau [1986] also show a decomposition algorithm for the 
general univariate case based on block decomposition, for fields supporting a 
polynomial factorisation algorithm. This algorithm requires an exponential 
number of field operations in the degree of the input polynomial, plus the 
cost of factoring the input polynomial. For separable irreducible polynomials 
over arbitrary fields their algorithm is shown to work in a quasi-polynomial 
number of field operations. And for irreducible polynomials over finite fields, 
their algorithm requires only a polynomial number of field operations. All 
this is reported in von zur Gathen, Kozen, and Landau[1987]. Complete de- 
compositions are dealt with in the tame case in von zur Gathen[1987]. We 
also consider computing decompositions of polynomials corresponding to a 
given ordered factorisation of their degrees. 

Multivariate polynomial decomposition in the tame case was examined by 
Dickerson[1987] and von zur Gathen [1987]. Both showed algorithms requiring 
a polynomial number of field operations (in the size of the input polynomial): 
Dickerson[1987] for the "monic" tame case and von zur Gathen[1987] for the 
tame case in general. We present an algorithm for multivariate decomposition 
over any field supporting a univariate polynomial factoring algorithm, based 
on the theorem of Evyatar and Scott [1982] and the univariate algorithm of 
Barton and Zippel[1985]. In general, it will require an exponential number 
of field operations. 
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2.1 The Model of Computation 

The model of computation used is the "arithmetic Boolean circuit" (see von 
zur Gathen [1986]). This model uses inputs xi,X2, ■ ■ ■ ,Xn from a field F. 
Operations are the arithmetic (field) operations +, — , x, /, and Boolean 
operations A, V, and -i. The connection between the arithmetic and Boolean 
parts of the circuit is provided by two types of gates. The zero test gate 
gives a Boolean indication of whether or not an input field value is zero. The 
selection gate outputs one of two input field values depending upon the value 
of a third, Boolean, input. The cost of algorithms will be measured in the 
number of field operations performed. Often, the input will be a polynomial 
/ e F[x] and the number of field operations will be counted in terms of the 
degree n of f and the characteristic p of F. If F = GF{p'^) for some e > 1, 
we will also consider the cost of computation over the prime field Z^, and 
hence in terms of e as well. 

Assume we can factor an arbitrary univariate polynomial / e F[x\ of 
degree n into irreducible factors in OiSpin)) field operations. Then we can 
also factor a multivariate polynomial g e F[xi,X2, ■ ■ ■ ,X(\ of total degree 
n into irreducible factors. Assume this can be accomplished in 0{S^p\n)) 
field operations (where Sp''(n) is a function of the size (n + 1)^ of a dense 
representation of the input). Let M{n) be such that the product of two 
polynomials of degree at most n can be computed in 0{M{n)) field opera- 
tions. We can choose M{n) = n log n log log n (Schonhage[1977], Cantor and 
Kaltofen[1987]), and M{n) = nlogn if F supports a Fast Fourier Transform. 
Also, assume two n x n matrices can be multiplied in 0{n^) field operations 
for some /x > 2. Coppersmith and Winograd[1987] show n < 2.38. 

In some of our algorithms we use P{S) to denote the set of all subsets 
(the power set) of a set S, and S* to denote the set of finite sequences of 
elements of S. 

2.2 Computing Right Division 

Given f,h& F[x] of degrees n and s respectively with s\n, we would like to 
determine if there is a, g & K[x] , where K is some algebraic extension of F, 
such that f = g o h. Lemma 1.1 shows us that if such a. g & K[x] exists it 
will be in F[x]. We find g by the usual divide and conquer approach, which 
is used in von zur Gathen [1987b]. 
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RightDivide : F[x] x F[x] F[x] 

Input: - f,hEF[x] of degrees n and s respectively, 
with s\n. 

Output : - g & F[x] of degree r such that f — g oh 
if such a g exists. 

If deg / < 

then return f E F . 
Else if < deg / < deg h 

then Quit (there is no solution) . 
Else if deg h < deg / , 

1) Let t := \r/2] . 

2) Let V := hK 

3) Find Q,Re F[x] such that 

f — Qv + R with deg it! < deg v . 

4) Recursively call RightDivide on {R, h) yielding 

go e F[x] and (Q, h) yielding gi e F[x] . 

5) Return gix^ + go- 

This algorithm requires 0(M(n) log n) field operations, with step two the 
dominant step at each recursive stage of the algorithm. We have the follow- 
ing: 

Theorem 2.1. Given f,h G F[x], we can determine if there exists ag G F[x] 
such that f — g oh and if so, find it in 0{M{n) logn) field operations. 

2.3 Univariate Decomposition using Separated Polynomials 

The algorithm of Barton and Zippel[1985] exploits the relationship between 
separated polynomials and polynomial decompositions described in section 
I.e. Let F be an arbitrary field of characteristic p. Let / G F[x] be of degree 
n and let (r, s) G N'^ be an ordered factorisation of n. We present a modified 
version of the Barton and Zippel[1985] algorithm conforming to our definition 
of the problem. 

SepBidecomp : x DEC^ 

Input: - f G F[x] monic of degree n. 

- (r, s) GN^, an ordered factorisation of n. 
Output: - {g,h)eF[x] such that {f,{g,h))EDECf^^g^ 
if such a decomposition exists. 
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1) Factor f{x) - /(O) = xqi{x)q2{x) ■ ■ ■ qm{x) 

where each qi e F[x] is irreducible for 1 < i < m . 

2) For each subset S of {l,...,m}, 

2.1) Let h^x Y[qi G F[x] . 

ies 

2.2) If degh — s, attempt to compute g e F[x] such 



that 



f — goh using RightDivide. If such a is found, 
then goto step 4. 

3) Quit, / has no decomposition in DEC^^gy 

4) Return U,{g,h)) e DEC^^.gy 

By theorem 1.6, for any polynomials f,h E F[x], there exists a G 
F[x] such that f = g o h ii and only if h{x) — h{y)\f{x) — f{y). Thus, 
h{x) — h{Q)\f{x) — /(O). By looking at all factors h of f{x) — /(O), we are 
guaranteed to find all possible right composition factors. Since there are 
2" subsets which must be checked for separation in step 2, the algorithm 
requires 0(Si7'(n) + 2"'M(n) logn) field operations. It does, however, work 
over any field for which a factorisation algorithm exists (in both the tame 
and wild cases). 



2.4 Univariate Decomposition in the Tame Case 

Kozen and Landau [1986] present an algorithm for univariate decomposition 
in the tame case over an arbitrary field, which uses a polynomial number of 
field operations in the degree of the input polynomial. For / G F[x] of degree 
n, they look at the decompositions of / into {g^ h) as solutions to systems of 
n + 1 non-linear equations for the coefficients of / in terms of the coefficients 
of g and h. 

Specifically, for u G F[x\ and i G N, let coeff(M,i) G F be the coefficient 
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of in u. Let 
/ = ^ ttiX^ e F[x] with aj e F for < i < n, 

0<i<n 

g ^ bix' e F[x] with bi e F ioi < i < r, 

0<i<r 

/i = ^ CjX* e F[x] with Q e F for 1 < i < s, 

l<i<s 

/Xjfc = ^ Qx* e with CjGFfors — A; + l<i<s and 1 < k < s. 

s—k+l<i<s 

U f = g o h, the foUowing facts are easily seen to be true: 

(i) coeS{h^, n — e)= coeff (/, n — e) = ttn-e for < e < s, 

(ii) coeff (/i'', n — e)— coeff (/x^, n — e) for e < A; < s. 

This implies a„_e = coeff — e) — coeff — e) for e < A; < s. For 
1 < /c < s, we know Hk+i — IJ'k + Cg-k^^^''- By binomial expansion we get 

fJ'k+l = il^k + Cs-kX^~^y 

where ip G F[x] and dcg^? < rs — 2k. Thus cocS^nl^^, rs — k) = ttrs-k = 
coeff (/x^,rs — k) + rCg-k- This gives the simple recurrence 

Qrs-k — coeff (/x^, rs — k) 

^s—k ) 

r 

which allows the computation of Cs, c^-i, . . . , Ci in turn, and hence the calcu- 
lation of h. Note that it is at this point, and only this point, that we require 
that p\r. This distinguishes the tame and wild cases. 

This system of equations uniquely determines an /i e F[x\ but a. g & F[x\ 
such that f = g o h may or may not exist. We can determine the existence 
of such a g, and if it exists, find it, using RightDivide as described earlier. 
Kozen and Landau[1986] show that a decomposition can be computed in 
O(rr^) field operations in general and O(n^logn) field operations in a field 
which supports a Fast Fourier Transform. In fact, the algorithm works over 
any ring in which r is a unit. 

In von zur Gathen[1987], an improvement of the result of Kozen and 
Landau[1986] is shown. Given a monic / e F[x] of degree n and (r, s) an 
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ordered factorisation of n with p \ r, his algorithm determines if there exists 
a decomposition of / in DEC^^^-^ and, if so, finds it, in 0{M{n) \ogn) field 
operations. The number of field operations required is dominated by the cost 
of RightDivide to obtain g from / and h. Von zur Gathen[1987] uses this 
algorithm for decomposition to obtain the set of separated factors of a given 
polynomial / G F[x\ of degree n in polynomial time in the tame case. 

A very fast parallel algorithm is also presented by von zur Gathen[1987] 
for univariate bidecomposition in the tame case. He shows that over any field 
F, given / e F[x\ and (r, s), an ordered factorisation of n such that p | r, 
it can be determined if there exists a decomposition of / in DEC^^^, and if 
so, it can be found, with a depth O(logn) circuit over F. 

2.5 Decomposition using Block Decomposition 

As seen in section l.D, the polynomial decomposition problem can be refor- 
mulated as one of finding functional block decompositions. Let / G F[x] be 
monic of degree n, and (r, s) an ordered factorisation of n. Kozen and Lan- 
dau[1987] adapt the techniques from Landau and Miller [1983] to construct 
all block decompositions of dimension two of / in BLOCKS^ They then 
check each such decomposition to see if it is functional. In general, however, 
their algorithm requires a number of field operations exponential in n. If 
/ is separable and irreducible over F, they show that there can be at most 
^logn i-,1q(.]^ decompositions in BLOCK S^^ and that each block decomposi- 
tion can be constructed in a polynomial number of field operations. Testing 
a block decomposition to see if it is functional requires only a polynomial 
number of field operations, but we may have to check all of them. Therefore, 
for separable irreducible polynomials / G F[x\, it can be determined if / has 
a decomposition in DEC^^^^y and if so, this decomposition can be found, in 

a quasi-polynomial number (n'^^'"^")) of field operations over F. 

The block decompositions of irreducible polynomials over a finite field 
F = GF{q) (where q = for some e > 1) have a stronger structure. Let 
/ G F[x\ of degree n be irreducible with splitting field K = F[x]/{f), and 
let (r, s) be an ordered factorisation of n. The roots of / in X have the 
form {a, a*, , . . . , a^" } for any one root a E K oi f. The Galois group 
of K relative to F is the set of automorphisms {cij : < i < r} with 
Ci7 = 7"^' for any 7 G -ft'. Kozen and Landau[1986] note that the only 
possible block decomposition of / has the form B = {Ci\0 < i < r} where 
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i < r. It is functional (and hence corresponds 
to a polynomial decomposition) if and only if there exists an /i G F[x] such 
that for < i < r, there exists a e K such that 

0<j<s 

The sphtting field K oi f is an algebraic extension of degree n over F, so we 
can easily compute a representation of these roots (in K), and check if this 
block decomposition is functional in a polynomial number of field operations. 
Kozen and Landau[1986] show that in this case, it can be determined if a 
polynomial / has a bidecomposition in DEC^^. and if so, this decomposition 
can be found, with a circuit of depth 0{\ogepn\o^ n) and size {epn)^^^\ We 
show the sequential analysis of this algorithm in the following theorem. 

Theorem 2.2. Let F = GF[q) for some q,p,e E N with p prime and q = p^, 
and let f e F[x] be irreducible of degree n. If (r, s) is an ordered factorisation 
of n we can determine if there exists a decomposition of f in DEC^ ^^ and 
if so, find it, in 0{'n?M{n) log q) field operations over F. 

Proof. Let K = F[z]/{f) and let a = 2; mod f G K. Multiplication in K 
requires 0{M(n)) field operations in F. We can therefore compute ct^" for 
all i with < i < s with 

^ ri log q — [rs^ log q) 

0<i<s 

= 0(n^ log g) 

field operations over K or 0{n'^M{n) logg) field operations over F. We then 
check if no<i<s(^~'^^") = h + c where h e F[x] and c E K. If so, there exists 
a g such that (/, {g, h)) e DEC^^^-^ and this can be found in 0{M{n) logn) 

field operations by theorem 2.1. We can compute no<i<s(^ ~ ofl") O(n^) 
field operation over K or 0{'n?M{n)) field operation over F. Therefore the 
bidecomposition problem can be solved sequentially for irreducible polyno- 
mials over finite fields with 0{n^M{n) logg) field operations over F. □ 

2.6 A Lower Bound on the Degrees of Splitting Fields 

Let F be a field such that for any m G N, there exists an algebraic extension of 
F of degree m over F. We will now show that in any such field, for any n G N, 
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there exist polynomials of degree n over F with splitting fields of degree 
exponential in n over F. Note in particular that finite fields are included in 
this theorem. One implication of this is that we cannot construct a standard 
representation of elements of such a splitting field in a polynomial number of 
field operations. It has been known for a long time that over the rationals and 
some other infinite fields that for any n, there exist polynomials of degree 
n whose Galois groups are Sn- The splitting fields of these polynomials 
are of algebraic degree n\ over their ground fields. In general however, such 
polynomials do not exist (see van der Waerden section 8.10, Jacobson section 
4.10). We instead make the following construction in an arbitrary field F. 
Let Pi e N be the i^^ smallest rational prime. Also define 

■^l^) = XI logp the Chebyshev function, 

p prime 
p prime 

p<e 

(where all logarithms here and throughout this section are natural). Let 
fi G F[x] be an irreducible polynomial of degree Pi. The splitting field Ki 
of fi has degree at least pi over F. If F is a finite field, [Ki : F] = Pi- 
The polynomial hi = /1/2 ■ ■ ■ fi will have splitting field Lj generated by the 
elements oi Ki U K2 D ■ ■ ■ U K^. This is a field of algebraic degree at least 
P1P2 ■ ■ - Pi over F. Let 

p prime 

n p- 

p prime 

Note that R{e) =exp{^{£)). 

Let n e N. If = max{i\pi < i}, then hk has a splitting field of degree 
R{e) over F. We will show that if £ < 0.77 V^i log n, then deghk = S{i) < 
n. It follows that R{0.77^/nlogrl) is exponential in n. If / G F[x] is any 
polynomial of degree n with divisor hk, we show that / has a splitting field 
of degree at least exp(0.5v^n logn) over F. We will use the following bounds 
from Rosser and Schoenfeld[1962]: 
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Fact 2.3. 

(i) pk < lAklogk for k > 6; 

(ii) 7r{e) < 1.26£/log£ for £ > 17; 
(Hi) £{1 - l/log£) < for n > 41. 

First, we show an upper bound on the function a{k) — S(pk) — J2i<i<kPi 
the sum of the first k primes, for A; e N. 

Lemma 2.4. For k > 6, a{k) < OMk'^ log k 
Proof. 

(7(A;) < 2 + 3 + 5 + 7 + 11 + 1.4 ^ ilogi 

6<i<fe 



rk 

< 28 + 1.4 / (i + 1) \og(i + l)di 



< 28 + 1.4(0.5(i + l)^log(i + 1) - 0.25(i + 1)^ ^) 
<0.86A;MogA; □ 



6' 



Lemma 2.5. For any n > 109, S{0.77y/n logn) < n. 

Proof. Applying lemma 2.4 to the the upper bound on the number of primes 
less than £ provided by fact 2.3(ii), 



1.26£\\ fl.26£" 



^(^)<0.86 — log 



log £ / I log £ 



1)2 



< 0.86(1.26)^- — — (log(1.26£) -loglog^) 



{\og£) 



e2 



< 1.37- — — (log £ + log 1.26 -log log £) 



< 



(l0g£)2 

1.7^2 



log^ 

for £ > 17. For n > 109 this gives us 



r-— . , 1.7(0.77 v/^d5^)^ n 
5(0.77 Vn log n) < ^^^^^ ^^^^^^^^^ < iog(0.77Vnlogn) ^ 

and the lemma follows. □ 
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Theorem 2.6. For n > 109 there exists a polynomial f G F[x] of de- 
gree n such that the splitting held of f has degree over F greater than 
exp(0.5i/n logn) . 

Proof. By lemma 2.5, ii £ < 0.77 Vn log n, then S{e) < n. Let £ = 
[0.77^/n log n\ . Let k — max{i|pi < £}. The polynomial hk has a split- 
ting field Lfe with degree at least R{£). By definition 



for n > 109. Therefore has a splitting field of degree at least exp(0.5\/nlogn). 
Let / be any polynomial of degree n such that hk divides / {hk has de- 
gree less than n). The polynomial / has a splitting field of degree at least 
exp(0.5-\/rilogri) over F. □ 

2.7 Decompositions Corresponding To Ordered Factorisations 

Let / G F[x] be of degree n and let p = (r„j,rm-i, . . . ,ri) be an ordered 
factorisation of n. A natural generaUsation of the computational bidecompo- 
sition problem is to compute the decompositions of / in DEC^ (if any). Let 
GenericBidecomp be an algorithm such that given / G F[x\ of degree n, and 
(r, s) G N^, an ordered factorisation of n, it will find the (possibly empty) set 
B of decompositions of / in DEC^g^ using D{n) field operations. Consider 
the following algorithm: 



R{e) = exp(^?(£)) 

> exp(£(l - l/log£)) 



> exp(0.77-ynlogn(l — 1/ log(0.77y^nlogn))) 




OrdFactDecomp : F[x] x P(n) P{DEC^) 
Input: - / G F[x] of degree n, 



~ P = ('"m) '"m-i) • • • ) '^i) » ^ ordered factorisation of n. 
Output: - the set of decompositions of / in DEC^ . 
If m = 1 



then return (/, (/)) 



else 



1) Find the set B of bidecompositions 



(/,(5,/l))GDEC£,,^) 
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where ta = n2<i<m "Ti 
using GenericBidecomp. 

2) Let T:=0. 

3) For each decomposition {f,{g,h)) &B, 

3.1) Recursively attempt to 
find a decomposition 

{g, {9m, 9m-l, 92)) e ^^C'f^.r^.i,...,^^) • 

3.2) If such a decomposition of g is found 
add {f,{gm,gm-i, - ■ ■ ,g2:h)) to T. 

4) Return T. 

This is simply a recursive application of the bidecomposition algorithm, 
and can easily be seen to return the set of decompositions of / in DEC^. 

We now define a p-easy family of polynomials, a family in which such de- 
compositions can be computed quickly. For 1 < i < m, let = (r^, r^-i, ■ ■ ■ , n) 
and ti = ni<j<m^i- A set J-'p C F[x] is p-easy if 

(i) for any i with 1 < i < m, any / e of degree d has at most one 
decomposition in DEC^.^^^^.^, 

(ii) it can be determined if such a decomposition exists, and if it does, it 
can be found with 0{D{d)) — d'^^^'> field operations, and 

(iii) if / e and (/, {g, h)) G DEC[^^^^^^^^ then g e J^^. 

If J'p Q ^U'] ^ p-casy family of polynomials, then the bidecompositions 
of / G J-p in step 1 can be found in D{n) field operations. Thus, com- 
puting OrdFactDecomp on / G with ordered factorisation p requires 
0{J2i<i<m D{ti)) field operations. Let I = floga n\ and let k = {eg, eg-i, . . . , ei), 
where = 2* for 1 < i < £. Noting that n < i < 2n, it follows immediately 
that Ci^j > fm-j for < j < m. Therefore J2i<i<mD{ti) < Y.i<i<e D{ei). 
Since D is polynomially bounded, J2i<i<eD{ei) — 0{D{n)). We have shown 
the following theorem: 

Theorem 2.7. Let n G N and let p be an ordered factorisation of n. Also, 

let Tp C be p-easy. Then, for any f G J-'p, we can determine if there 
exists a decomposition of f in DEC^, and if so, find it, in 0{D{n)) field 
operations. 
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This theorem says that the general problem of computing the set of de- 
compositions of a polynomial with a given ordered factorisation is Cook re- 
ducible to the bidecomposition problem for p-easy families of polynomials. 

Two p-easy families present themselves immediately. If F is an arbitrary 
field and p | for 1 < i < m then F[x] is a p-easj family of polynomials. This 
follows because all the bidecompositions performed in step 1 are tame. From 
von zur Gathen[1987] and theorem 2.7 above, it can be determined whether 
a decomposition of / e F[x] exists in DEC^ and if so such a decomposition 
can be found in 0(M(n) log n) field operations. 

li F = GF{q) and J-'p is the set of polynomials irreducible over F, then 
J-'p is p-easy. This follows since, if / G J-p and (/, {g, h)) G DEC^, then g 
is also irreducible over F. By theorem 2.2 and theorem 2.7, a decomposition 
of any f e J^p can be found in 0{n^M{n) logg) field operations. 

2.8 Computing Complete Univariate Decompositions 

The following method for computing complete decompositions was suggested 
in von zur Gathen[1987] for the tame case and can be applied whenever we 
can do bidecomposition. Let D{n) be the number of field operations required 
to find a bidecomposition of / G F[x\ corresponding to an ordered factorisa- 
tion (r, s) of n. The following algorithm computes a complete decomposition 
of / in DEC^. 

CompleteDecomposition: cDEC^ 
Input: - / G F[x\ . 

Output : - (/, . . . , /i)) G cDEC^ . 

1) Compute the integer factorisation n = p^^p^ ■ ■ ■ p^j^ of n. 

2) Let d{n) = (ei + 1) ■ ■ ■ (cfc + 1) be the number of divisors 

of 11 and 1 = ri < r2 < • • • < rd{n) = n he the divisors of n. 

3) Let j > 1 be the smallest number such that / has a 
decomposition (/, {g, h)) G DECf^,^^/^,^ . 

4) If j — d{n) then / is indecomposable; otherwise 
decompose h recursively {g is indecomposable 
since any left composition factor of (7 is a 
composition factor of / of smaller degree than g) . 

The number of field operations required by this algorithm is 0{D{n)d{n)). 
Hardy and Wright [1960] (theorem 317) show that d{n) = 0{n'') for all e > 
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0. Therefore, we can compute complete decompositions in 0{D{n)n'^) field 
operations for any e > 0. This algorithm finds the lexicographically first 
complete decomposition of /. 



2.9 Decomposing Multivariate Polynomials in the Tame 
Case 

Once again we denote the sequence of indeterminates Xi, . . . ,Xi as x. We 
define the set W?^ C of monic polynomials in F[x| as follows: 



f e F[x\, deg/ < deg/ 

eN\{0}, deg,^/<rf, for l<z< 



where deg/ and deg / are the total degrees of / and / respectively. Dick- 
erson[1987] uses much the same method as Kozen and Landau[1986] did for 
the univariate case to decompose monic multivariate polynomials in the tame 
case. Given a monic / G F[x] of degree n and r G N, he shows how to find 
a monic g G F[x] of degree r and monic h G F[x] of degree r — n/s such 
that f ~ g oh. The computation requires 0{n^^) field operations. Prom the 
algorithm it is seen that if such a decomposition exists, it is unique. Note 
that monic multivariate polynomials arc a very special case of multivariate 
polynomials. Just because they can be decomposed does not mean that mul- 
tivariate polynomials can be decomposed in the tame case in general (though 
it is possible a reduction from the general case exists). 

In von zur Gathen[1987], the tame case for the decomposition of mul- 
tivariate polynomials is dealt with completely. He first defines the set of 
polynomials P^'' C F[x] which are strongly monic in xi as follows: 



F 



f 



E 

0<i<n 



f,x[ G F[x] 



nen, /o,...,/n e F[x2,...,xe\ 
fn = 1, deg / = n 



If / G F[x] is strongly monic and f = g o h, then /(xi, 0, . . . , 0) = g o 
h{xi, 0, . . . , 0). As we know f{xi, 0, . . . , 0) is of degree n (/ is strongly monic), 
the univariate decomposition of /(xi, 0, . . . , 0) in DEC^^^^ completely deter- 
mines g G F[x\ in the multivariate decomposition. Once g is computed, a 
linearly convergent Newton iteration is used to compute h & F[x\ in a num- 
ber of field operations polynomial in the input size. Given / G F[x\ and 
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g G F[x], the process of finding h G F[x] such that f = g o h is a special 
case of (multivariate) power series reversion. This is dealt with extensively 
by Brent and Kung[1977,1978]. They show the problem is linearly equivalent 
to power series composition when [dg/dx] ^ 0, which is true in the tame 
case. Furthermore, they show that multivariate polynomial reversion can be 
computed in log n) 2 Af (n)^) field operations. 

For an arbitrary / G F[x\ we can use substitutions of the form a{xi) = 
Xi + (TiXi with G F for 2 < i < m to make / strongly monic. For such 
a substitution a we write af = f{xi,X2 + 0-2X1, . . . ,Xm + CTmXi). This sub- 
stitution a may be inverted by the substitution a^^ = {—(T2, —03, . . . , — 
and (Ja~^f = f. For a suitably chosen substitution a, f = aaf is strongly 
monic in Xi (where a G F is chosen to make the highest order coefficient of 
Xi in aaf one), li f — g o h for g,h & F[x] then / = ici~^g) o {a~^h) is a 
corresponding decomposition of /. 

For / G F[x] of total degree n, von zur Gathen[1987] shows how to 
choose a substitution a such that af is strongly monic. This can be done in 
a polynomial number of field operations in m, n, and k, where k is the number 
of monomials in /. (the sparse representation of / has size 0{km\ogn)). For 
< i < n, let Ui G F[x2, ■■■ , Xm] be the homogenous part of degree n — i of 
the coefficient of x\ in /. The homogenous part of degree n of / is therefore 
J2o<i<nUiX'' 7^ 0, and by the homogeneity of the -Uj's, u = J2o<i<nUi is also 
nonzero, and of degree at most n. Let K be an extension field of F with 
more than n points. K can be chosen as a field of degree O(logn) over F. 
Now, for a substitution a — {a2, (73, ... , cr^^), deg^.^ af — n \i and only if 

degf{xi,a2Xi, . . .,a^Xi) = deg[(a)(a;i, 0, . . . , 0)] = n. 

This is true if and only if u{a2, a^, . . . , a^) 7^ 0. To find (T2, . . . , a^ we proceed 
in stages i from 2 to m. At stage i we choose ai & K such that 

u{a2, . . . ,ai, Xi+i, . . . , Xm) 

is nonzero. We do this by considering Vi = u{a2, ■ ■ ■ , ai-i,Xi, . . . ,Xm) as a 
polynomial in K{xi^i, . . . , a;TO)[a;j] of degree in Xj at most n. Thus Vi has at 
most n roots in K{xi+i, . . . , Xm) and we can find a non-root ai & K oi Vi 
with at most n evaluations of Vi at points in K. Assume / is the sum of at 
most k monomials. Then u is also the sum of at most k monomials and a can 
be found in 0(/crrm log n) field operations over K or 0(A;mnlognM(logn)) 
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field operations over F. Decomposing multivariate polynomials is, therefore, 
polynomial time (in the input degree and the size of the sparse representation) 
reducible to decomposing strongly monic multivariate polynomials. 

2.10 Multivariate Decomposition Using Separated Polynomials 

Using theorem 1.15 we can generalise the algorithm of Barton and Zip- 
pel[1985] to the multivariate case and obtain a multivariate decomposition 
algorithm for any field supporting a factorisation algorithm. To do this we 
must show a "right division" algorithm for the multivariate case. Namely, 
given f,hE F[x\, we must be able to find a. g E F[x] such that f = g o h {if 
such a g exists) . We cannot use the "Taylor Expansion" method of the uni- 
variate case directly. Instead we use the methods of von zur Gathen[1987] to 
transform the problem to one involving strongly monic polynomials. Another 
simple transformation yields a univariate problem such that the solution is 
the same as in the original problem. 

MultiRightDivide: F[x] x F[x] F[x] 

Input: - f,hEF[x] of total degrees n and s respectively. 
Output: - g E F[x] of degree r — n/s such that f = goh 
(if such a g exists) . 

1) Let X be an algebraic extension of F with 
more than n elements. 

Let a = ((T2, (T3, . . . , (T„) e -fC™"^ 

be a substitution and a E K such that 

/ = aaf = f{xi, X2 + (T2X1, ...,Xm + (TmXl) & K[x] 

is strongly monic (see previous section) . 

2) Let h = ah. 

3) Using RightDivide determine if there exists aye K[x] 
such that f{x, 0, . . . ,0) = g o h{x, 0, . . . , 0) 

and if so find it. If no such g exists, quit. 

4) Return g — a~^g. 

In the previous section we saw that step 1 can be performed in 
0{kmnlognM{\ogn)) field operations over F, where k is the number of 
monomials in /. It follows that f = g o h if and only if aaf — ago ah. Since 
aaf is strongly monic, there exists a (7 G F[x] such that aaf = ago ah if and 
only if aaf{x, 0, . . . , 0) = ag o ah{x, 0, . . . , 0). Using RightDivide we can 
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determine the existence of g = ag, and if it exists find it, in 0(M(n) log n) 
field operations over K or 0{M{n) lognM(logn)) field operations over F. If 
g exists we can immediately compute g, and the whole computation requires 
0{(kmn\ogn + M(n) logn)Af(logn)) field operations over F 

The algorithm for multivariate decomposition over any field supporting 
a factorisation algorithm proceeds in much the same way as the Barton and 
Zippel[1985] algorithm for the univariate case. 

MultiSepDecomp : F[x\ x ^ MDEC^ 
Input : - / e F[x\ of degree n 

- {r,s) GN^, an ordered factorisation of n 
Output: - {g,h) e {F[x] x F[x]) such that f ^ goh 
if such a decomposition exists 

1) Factor /(f) - /(O, . . . , 0) = xqi{x)q2{x) ■ ■ ■ q^{x) 
where each e F[x\ is irreducible for 1 <i <m 

2) For each subset S of {l,...,m} 

2.1) Let h = f e F[x\. 

ies 

2.2) If degh ~ s, attempt to compute g G F[x] such 

that 

f = g o h using MultiRightDivide. 

If such a g is found, then goto step 4. 

3) Quit, / has no decomposition in MDEC^^^y 

4) Return (/, {g, h)) G MDECf^^^^ . 

The number of subsets of S is 2". This algorithm can, therefore, be com- 
pleted with 0(Sf(^) + 2" (/cmn log n + M(n) logn)M(logn)) field operations 
over F. It does, however, work in both the tame and wild cases over any 
field supporting a polynomial factorisation algorithm. 
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3 Additive Polynomials 

3.1 Definition and Root Structure of Additive Polynomials 

Let F be an arbitrary field of characteristic p greater than zero. Define a 
polynomial / e F[x] to be an additive polynomial if, for independent in de- 
terminates X and y, 

f{x + y)^f{x) + f{y). 
The non-zero additive polynomials in F[x] are exactly those of the form 

f = ttix^' 

0<i<u 

where i/ G N, a, e F for 1 < i < i/, and Oj, 7^ 0. The integer u is called the 
exponent of /, and we write "expn/ = u" . We denote the set of additive 
polynomials over F as Ap. 

The additive polynomials have a well understood decomposition struc- 
ture which leads to a number of interesting results on decomposition in the 
general case. This structure was first developed in Ore [1933b], who inves- 
tigated the vector space structure of the roots of additive polynomials (as 
well as investigating the ring structure of the additive polynomials under 
composition - see chapter 4). This work was continued by Whaples[1954], 
who examined the Galois groups of additive polynomials and characterised 
additive polynomials in terms of these groups. In Dorey and Whaples, the 
Galois group ^/ of $/ = / — f{x) e F{f)[y] (where / G Ap) is used (see sec- 
tion l.B) to show that all normal decompositions of additive polynomials are 
decompositions into additive polynomials. We use this approach to develop 
much of the structure of the roots of additive polynomials in terms oi Qf. 
Though the theorems in this section are for the most part known (with the 
possible exception of theorem 3.2(i)), the extension of the approach of Dorey 
and Whaples is of interest. For a given additive polynomial f E Ap, it serves 
to illustrate the strong connection between the separated factors of $/, the 
Galois structure of / (which is the basis for block decompositions), and the 
Galois structure of Not coincidentally, each of these three approaches 
leads to at least one algorithm - the first being the separated polynomial 
algorithms of Barton and Zippel and Alagar and Thanh, the second being 
the block decomposition algorithm of Kozen and Landau, and the last be- 
ing a number of algorithms specifically for additive polynomials, which are 
presented in chapter 5. 
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Theorem 3.1. 

(i) Let f E Ap be monic, with exponent v such that f is squarefree (a^ = 
/'(O) ^0). Let K he the splitting held off. Then the roots off in K 
form a vector space Vf over Zp of dimension v. 

(a) For each Gnite Zp-vector space V C. F of dimension u, there exists a 
unique monic f E Ap with exponent v such that the roots of f are 
exactly the elements of V. 

Proof. 

(i) For a, P E K such that f{a) = f{l3) = 0, we see that 

/(a + /3) = /(a) + /(^) = 0, 

f{ka) — kf{a) — for any k e Zp. 

Since /'(O) 7^ 0, the greatest common divisor of / and /' is one, and 
hence / has no multiple roots. Therefore Vf has p"^ distinct elements 
and dimension v. 

(ii) Let {9i, . . . , 6^) be a basis for V in F over Zp. The polynomial 

has roots k9i for all k E Zp. For i >2, define 

*i = {xP - -^i-iieif-^x) o e A^^. 
If ^'i-i(a) = for a e F then ^^(q;) = 0. Also, 

Since is additive, ^'^ has roots consisting of all Zp-linear combinations 
of {^1, . . . , 9i}. Thus the roots of are exactly the members of the 
vector space with basis {9x,...,9i). Let f — which is monic and 
additive. This / is also unique by virtue of being a monic interpolant 
of degree of p'^ distinct points. Note also that /'(O) as / has p'^ 
distinct roots in / and degree p'^. 
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Call the Zp- vector space V of roots of an additive polynomial / G F[x] the 
kernel of /. Say an additive polynomial is simple if it is monic and /'(O) 7^ 0. 
In this section we will deal almost exclusively with simple additive polyno- 
mials. Non-simple monic additive polynomials arc just simple polynomials 
composed on the right with for some i > 0. Assume f & Ap is monic and 
f = g o ^ Ap where g G Ap is simple and 

0<i<a 

with a eN, bi e F, and ^ 0. Then 

0<i<a 

0<i<a 

— x^ o g 

where 

g= ih)^xP' eAK 

0<i<a 

and K is an algebraic extension of F. So / has a kernel of dimension a, 
namely the kernel of g. If F is perfect (and hence closed under p*'^ roots) g 
will be in F[x] as well. 

Let / G Ap he simple with exponent u, splitting field K and kernel 
Vf C K. The structure of the kernel of / and that of the fields between 
K{f) and K{x) (and hence the structure of the decompositions of / over its 
splitting field) are closely hnked. Let $/ = f{y) — / G F{f)[y] C F{x)[y] 
with splitting field Q D F{f) and Galois group Qf — Gal{Q/F{f)) as in 
theorem 1.5. Because = §^f{y) 7^ 0, Q is a separable field extension 

oiF{f). 

Theorem 3.2. 

(i) K{x) is the splitting field of^f, 

(a) Qf is the group {x\-^x + a\ aEK, f{a) = 0} under composition, and 

(Hi) Vf - Gf. 
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Proof. 

(i) For a eVf, 

<^f{x + a) = f{x + a)-f{x) 

= f(x) + f{a)-fix) 
= 0. 

Since $/ has degree p'^ over F(f), x + Vf is the complete set of roots 
of $/. We know that x G x + V/ and K is the smallest extension field 
of F containing Vf, so fl = K{x). 

(ii) Prom (i), all roots of $/ are of the form x + a where a is a root of / 
in K. Therefore, Qf contains the p'^ automorphisms {x i— ?■ a; + a | a G 
K , /(a) = 0}. Since [F{x) : F{f)] = p'^, this is the entire Galois 
group. 

(iii) From (ii), ^/ is isomorphic to a set of monic linear elements in K[x] 
under composition. Trivially this is isomorphic to the group of constant 
terms of these elements under addition. These constant terms are all 
the roots of / in K, so Gf = Vf. □ 

Theorem 3.3. Let f E Ap be simple of exponent v. Let g,h E F[x] be of 
degrees r — p^ and s — p"^ respectively such that (/, {g, h)) G DEC^^ gy Then 

(i) g and h are additive and simple, and 

(ii) h has kernel Vh = Qh, where Qh Gf is the subgroup fixing F{h) C 
F{x) pointwise. 

Proof. By theorem 1.5, the automorphisms in Qf fixing F{h) form a group 
Qh such that Qx Qh Qf, and the index of Qx in Qh is p'^. From theorem 
3.2(i), K{x) is the splitting field of $/, so Qx is the identity group, and the 
cardinality of Qh is p'^. From the isomorphism between Qf and Vf, there 
is a subspace W of Vf of dimension a corresponding to the subgroup Qh- 
Let h G K[x] be the simple additive polynomial with kernel W. For all 
a e W, h{x + a) = h{x) + h{a) = h{x). Thus F{h) is fixed by Qh- By 
theorem 3.1, h is unique, so h = h. Now, for algebraically independent 
indeterminates x and y, f = g{h{x + y)) = g{h{x) + h{y)) and since / is 
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additive / = g{h{x)) + g{h{y)). Thus g is monic and additive. If g is not 
simple then g = g o for some simple additive polynomial g G K[x] and 
£ > 0. But then f — g o oh — goh^ which is not simple. So g is simple 
as well. □ 

3.2 Rationality and the Kernel 

If / e is simple with kernel Vf Q K and splitting field a subspace 

V/i C V/ is said to be rational if the simple polynomial h G Kk corresponding 
to Vh is in Kp. We would also like to formulate rationality in terms of the 
structure of the kernel. 

Theorem 3.4. A subspace Vh of Vf is rational if and only if Vh is invariant 

(as a set) under Gf = Gal{K/F). 

Proof. Assume h G Ap- The coefficients of h are the values of the elementary 
symmetric functions of the roots of h in K. The automorphisms in leave 
these coefficients fixed, and must therefore leave Vh invariant (as a set). 

Conversely, if Vi is invariant under G f then the values of the elementary 
symmetric functions of the elements of Vh are fixed under Gf, and so are in 
F. These are exactly the coefficients of h and so h E Ap. □ 

When dealing with a finite field F a somewhat stronger structure can be 
shown. 

Theorem 3.5. Let F = GF{q) where g = G N for some p, e G N with p 
prime. Let K be an algebraic extension of F and f G A^ of exponent v with 
kernel Vf and splitting field L. Then f E Ap if and only ifVf = Vf. 

Proof, li f e Ap and a is a root of / in L, then so is a^. This follows 
since, if g' G F[x] is the minimal polynomial of a, g\f and ^'(q;^) — (a and 
a* are conjugates since F is finite). Thus Vf C Vf. Since x — >■ is an 
automorphism of L over F, Vf = Vf. 

If Vf = Vf then we must show that / G F[x]. The group H of automor- 
phisms of L over F is the group generated by the automorphism a; — )■ x^. 
Thus Vf is invariant (as a set) under H. As the coefficients of / are symmet- 
ric functions of the elements of Vf, they are fixed by H, and therefore must 
be in F. Hence / G Ap. □ 

The preceding theorem gives the following alternative formulation of the 
bidecomposition problem for additive polynomials: 
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Let F = GF{q) where e G N, p is prime, and q = ]f . Let K be 
an algebraic extension of F and let C be a Zp vector space of 
dimension v over Zp such that — V. For a given a with 1 < a < 
determine if there exists a a dimensional subspace W oi V such that 
= W, and if so, give a basis for some predetermined number of 
them. 

Since = V, all the elements of V can be specified as the roots of a 
single additive polynomial f e Ap oi exponent u. The found subspace W 
(if it exists) will be the kernel of a right composition factor /i e of / of 
exponent a. 



3.3 Rational Decompositions of Additive Polynomials 

We can now talk about decompositions of simple additive polynomials in 
general and their relationship to their kernels. For any n, m e N, let 

P= irrn,rm-i,...,ri) 



be an ordered factorisation of n. Define 
APDEC^^ = |(/, (/^, . . . , A)) e A^ X (A^)^ 

Similarly, for simple additive polynomials, define 

SAPDECl = {(/, (/^, . . . , /i)) e A^ X (A^)" 



f = fmO---0 fl 

and deg fi = ri = 



f simple, / = /m o • • • o /i, 

and deg f^^n^ p''' 



Obviously SAPDECf^ C APDEC^ C DEC^. 

Let c^i = ^ finite Zp -vector spaces in F. Define 



l<j<i 



FLAGSl = if, (Kn, . . . , Vi)) e Af X V" 



/ simple, Vm is the kernel of /, 

Vm^Vm-l^---^Vi, 

diml^j = di, for 1 < i < m 



The sequence Vm 2 Kn-i 2 • • • 2 K is called a flag of vector spaces associ- 
ated with /. 
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Let / e Af be simple. For any (/, (/„, . . . , /i)) G SAPDEC^ let hi = 
fi ° fi-1 o • • • o /i G -'^F and let Vi be the kernel of hi. Then by theorems 
3.1 and 3.3 {f,{Vm,...,Vi)) e FLAGS^. Therefore, we define the map 
m : SAPDEC^ ^ FLAGS^ by (/, (/^, . . . , /i)) ^ (/, (K., . . . , 14)). 

Theorem 3.6. T^^ is a bijection between SAPDEC^ and FLAGS^. 

Proof, rf^ is injective since distinct additive polynomials have distinct 
kernels. If (/, {Vm, V^-i, ■ ■ ■ ,Vi)) e FLAGS^, then by theorem 3.3 the 
additive polynomial hi with kernel Vi has a factor hi-i with kernel Vi-i. 
Thus hi = fi o hi-i for some unique fi E Ap of degree di/di^i = r^. Thus 
(/, {fm, • • • , /i)) e SAPDEC^ and this map from FLAGS^ to SAPDEC^ 
is injective and is in fact the inverse ofTp"^. Thus T^^ is a bijection. □ 

3.4 The Number of Bidecompositions of a Polynomial 

We will now compute the exact number of bidecompositions of a simple 
additive polynomial f & Ap into two simple additive polynomials over its 
splitting field K. Assume / has exponent u. The number of simple additive 
right composition factors of / in K[x] of exponent cr is exactly the number of 
(7-dimensional subspaces of the kernel of /. This is calculated in the following 
well-known lemma. 

Lemma 3.7. The number of a-dimensional subspaces of a p -dimensional 

vector space V over Zp is 

n ip^-p') 

^1/ Q<i<a 

n ip^'-p')' 

0<i<a 

Proof. The number of linearly independent cr-tuples of vectors in V is 

n ip^-p')- 

0<i<a 

This is the number of all bases for all vector spaces of dimension a. Each a 
dimensional vector space has no<i<o-(p'^ ~P') bases. The lemma follows. □ 
The desired cardinality theorem now follows immediately. 
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Theorem 3.8. Let f G Ap be simple of exponent v with splitting field K. 
The number of bidecompositions of f in APDECj^^-^ is S^. 

This theorem gives a super-polynomial lower bound for the number of 
decompositions of an arbitrary polynomial over an algebraic extension field. 

Theorem 3.9. For any even e N, there exist monic polynomials f E F[x] 
of degree n — p" with splitting field K such that there are at least n^'"^" 
decompositions of f in DEC^^^-^ where A = (61ogp)~^. 

Proof. Assume n = where v is even and let / be a simple additive 
polynomial of exponent u. Then / has 5| decompositions in DEC^^ 

n ip^'-p') 

2 



> 



n -p') 

0<i<| 

(pi) I 

pi 2 



> {P 

where A = (61ogp)~^. □ 



3.5 Complete Decompositions of Additive Polynomials 

Let n G N and let phe a, length m ordered factorisation of n. Complete de- 
compositions of additive polynomials with ordered factorisation p will be con- 
sidered in a straightforward manner. Define the set cAPDEC^ C cDEC^ to 
be the set of complete rational decompositions of additive polynomials with 
ordered factorisation p. By theorem 3.3 these will be decompositions into ad- 
ditive polynomials. Similarly, define the set cSAPDEC^ C cAPDEC^ C 
cDEC^ to be the set of complete rational decompositions of simple addi- 
tive polynomials with ordered factorisation p. The image of cSAPDEC^ 
in FLAGS^ will be called cFLAGS^ and it too corresponds to the set of 
rational complete decompositions of simple additive polynomials. Members 
of cFLAGSf, can also be characterised as those members of FLAGS^ whose 
fiags are maximal. 
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3.6 The Number of Complete Rational Normal 
Decompositions 

In much the same way as we calculated the number of right composition 
factors of given exponent of a polynomial in theorem 3.7, we calculate the 
number of complete decompositions of a polynomial over an extension field. 
Let / e Ap be simple with exponent i/ and kernel Vf. The number of complete 
decompositions of / over its splitting field K is equal to the number of 
maximal flags in Vj, and turns out to be dependent only on u, not on /. As 
all subspaces of Vf are rational in K, each maximal flag will have u subspaces 
and will have the form 

1^/ = K 2 K-i 2 • • • 2 Vi 

where dimVj = i. The corresponding complete decompositions will be into 
exponent one, p-linear, composition factors. 

Lemma 3.10. The number of a -dimensional subspaces of a u-dimensional 
vector space V over Zp which contain a given {a — 1) -dimensional vector space 
W is 

Proof. There are p'^ —p'^^^ vectors of V which are linearly independent with 
W. A given cr-dimensional vector space containing W is generated by W 
plus any one of p"^ — p"^'^ vectors. The lemma follows. □ 

The following lemma gives bounds for J^^, and hence for the number of 
complete decompositions of / over K. 

Lemma 3.11. Let f E Ap be simple of exponent v with splitting field K. 
The maximum number of distinct complete normal decompositions of f 
over K is bounded by 

P 2 < J-'' < p 2 "1" 2 . 

Proof. The fact that there are J-^ distinct complete normal decompositions 
of / over K follows from the preceding discussion. We get the bounds as 
follows: 
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n V 



l<i<u 



n 



< n p^'"''^ 



l<i<i> 



< P 2 2 



n V 



l<i<v 



pV — pi- 1 



n 



> n p'"' 



> P 2 



□ 



J^^ is at least where ^ = (21ogp)^^ and is super-polynomial in the 

degree n of /, and so there is a super-polynomial number of different complete 
normal decompositions of / over K. However, this does not guarantee that 
these decompositions are inequivalent in the sense that Ritt[1922] considered 
for the characteristic zero case. We now consider this question in the wild 
case. 

As we saw in section l.F, in the tame case there are two types of ambigu- 
ous decompositions. Recall that iiu & F[x] and m, r e N, then {x"^ ■u'^)ox^ — 
x^ o [x"^ ■ u{x'^)), an exponential ambiguity. If x"^ • u'^ and x"^u{x'^) are in- 
decomposable and additive, then since they are necessarily squarefree, r and 
m are at most one. In the case of additive polynomials therefore, exponen- 
tial ambiguity is simply identity. The second kind of ambiguity in the tame 
case are trigonometric ambiguities - ambiguities arising from the commu- 
tative properties of the Chebyshev polynomials under composition. As we 
saw in theorem 1.13, the Chebyshev polynomial Tpi = x^\ for i e N, in 
fields of characteristic p greater than two. In fields of characteristic p = 2, 
= 1 if i is even and a; if i is odd. Instead of restricting ourselves to 
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equivalence under these two types of ambiguities, we define the more general 
concept of a permutation ambiguity. Two complete normal decompositions 
are permutation equivalent if the composition factors of one are a permuta- 
tion of the composition factors of the other. Trigonometric ambiguities are 
certainly encompassed in this definition. We now proceed to construct a class 
of polynomials which have a super-polynomial number (in their degrees) of 
permutation inequivalent decompositions over their splitting fields. 

Theorem 3.12. Let p e N be prime, u E N and F = GF{p''). Also, let K 
he an algebraic extension of F of degree p" over F. Then there exist simple 

2 

additive polynomials f E K[x] of exponent v which have > pairwise 
permutation inequivalent complete normal decompositions in cSAPDEC^ . 

Proof. Let (6*1, ... , 9^) be a basis for an algebraic extension F of Zp of degree 
u. Also, let f — x^'^ — X e F[x], and e E F (where F is an algebraic closure 
of F) be algebraic of degree p'^ over F. Consider the polynomial / with roots 
consisting of all elements oi K = F[e] of the form ea for a E F. The roots 
of / have a basis {e6i, . . . ,edv) over Zp. As in the construction of theorem 
3.1, we now describe complete decompositions of / and / with respect to the 
bases (^i, . . . , 9^,) and {e9i, . . . , e9i). Let 



= {x^ - ^!i^^{9iy-^x) o ^r._^ e F[x], and 
= (xP - ^i_^{e9iy-^x) o e K[x]. 

Then 

/ = ={xP - ^^^i{e^)P-^x) o . . . o (xP - ^r^x), and 
/ = ^{xP - ^,_^{e9,y-'x) o...o{xP- {e9,y-'x). 



^1 = xP-9r^x E F[x], 
*i = xP-(s9iy-^x E K[x]. 



and 



For i > 1, define 



Since, ior 1 < i < u, 



= n 



(ai,...,Oi)ezi, 



l<j<i 
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we find that 

(ai,...,ai_i)ez;-l l<i<i-l 

(ai,...,a,_i)e4-l l<i<i-l 

Thus, in any decomposition of / into p-linear components in K[x], for 1 < 
i < f, the i*'* composition factor has the form 

xP - aeP'~'^-'^^x 

for some a e F. If any non-identity permutation of a decomposition was also 
a decomposition of /, then 

for some 1 < i < j < and a,b & F. But then e would satisfy a polynomial 
in F[x] of degree less than p*^, giving a contradiction. It follows that for the 
class of polynomials just constructed there are J^'^ permutation inequivalcnt, 
complete normal decompositions. □ 

The above theorem gives a super-polynomial lower bound on the number of 
permutation inequivalent, complete normal decompositions possible for an 
arbitrary polynomial. 

Theorem 3.13. Let p be a prime number, u & N, and n — p". There exist 
Gelds K of algebraic degree at most n\ogn over Zp, and monic polynomials 
of degree n in K[x] which have n^^°^^ decompositions in cDECf which 
are inequivalent up to exponential and permutation ambiguities (where /i = 
(21ogp)-ij. 

Proof. Let f e Ap he simple of degree n = p'^ as constructed in theorem 
3.11. By lemma 3.11 we know / has at least 

pi = n''i°g" 

complete normal decompositions in K[x] (where n — (21ogp)~^), and these 
decompositions are inequivalent up to exponential and permutation ambigu- 
ities. The field K in theorem 3.11 has degree i^p" = O(nlogn) over Zp. □ 
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Additive polynomials are certainly not the only class of polynomials which 
potentially have a super-polynomial number (in their degrees) of inequiva- 
lent decompositions. For example, let Q be a set of additive polynomials 
which have a super-polynomial number of inequivalcnt decompositions in 
their degrees (such as that defined in theorem 3.11). Define a new set of 
polynomials 

^ = {^0/0^1/ e Q, 9&F[x], deg/ = deg^ = n}. 

Each f & V has a super-polynomial number of decompositions in its degree 
and yet V is not a set of additive polynomials. 
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4 The Ring of Additive Polynomials 
4.1 Basic Ring Structure 

Ore[1933a] considers rings of polynomials Rp Q F[x] under the usual poly- 
nomial addition (+), and a (possibly non-commutative) multiplication (x). 
The only further assumption he makes is the existence of a degree function 
6 : Rf\ {0} N such that ii f,g e Rp with 6{f) = r and 6{g) = s, then 
S{f X g) — f + s. In Ore[1933b] he applies this theory to the ring Ap of ad- 
ditive polynomials with composition as ring multiplication and exponent as 
the degree function. In this chapter, in sections A-D we present a summary 
of the theory of Ore as applied to additive polynomials. In section E we in- 
vestigate the uniqueness properties of decompositions, and some properties 
of the indecomposable composition factors. We also strengthen a theorem 
of Ore[1933a] as applied to additive polynomials. In section F we use the 
relationships between decompositions developed in the previous sections to 
give an upper bound on the number of complete rational decompositions of 
an arbitrary additive polynomial. In chapter 5 we will then use the theory 
developed here to construct decomposition algorithms for additive polyno- 
mials. 

Recall from chapter 3 that if F is a field of characteristic p then f ^ F[x] 
is additive if f{x + y) = f{x) + f{y) for independent indeterminates x and 
y. We denote the set of all additive polynomials over F as C F[x] and 
for / e Ap, 

0<i<i' 

with Qi e F ior < i < u and a,^ 7^ 0. The integer u > is called the 
exponent of / and we write expn f — v. It is easy to see that is a ring 
without zero divisors. We will also show it has a right division algorithm (ie. 
if f, g E Ap, with g ^ 0, then there exists Q,R E Ap such that f = Q o g -\- R 
and expn R < expn g), and is therefore a left-Euclidean ring (the terminology 
is derived from the fact that the right division algorithm makes it a principal 
left ideal ring). Let f,g & Ap with g and expn / = 1/, and expn 51 = p. 
Assume also that / and g have leading (high order) coefficients a & F and 
b E F respectively. U v < p then division is trivial. U u > p then with 
fi'^) = /, define 

/i(-) = ab-P-^-'xP-^-' e A^ 
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and 

fi-l) = f{-) _ h^-) o g e Ap. 

Then f""^ = h^""^ og + f(^-^^ and f""-^^ has exponent less than that of f''^ 
Iterating this process we get 

/ = (/^H + /i('^-i) + . . . + o ^ + /(^-i) 

and the exponent of f^P~^^ is less than the exponent of g. This gives a right 
hand division algorithm for A^. 

Let f,g,h G Ap. U f = g o h, then we write h 'if f, meaning h is a 
right composition factor of /. We will write g — f </> h meaning g is the 
compositional quotient after dividing / by /i on the right (provided h does 
divide / on the right). This quotient is unique because of the existence of 
the division algorithm shown above (or by lemma 1.1). Finally, ii h if f — g, 
then we write f ^ g mod h. As an example, with F = Z3, let 

f = x"^^ + 2x^ + x^ + 2x, 
g = x^ + x^ + X. 

Then 

f ^ x^og + x^ + 2x 

— x^og + xog + 2x^ + x 
= (x^ + x) og + {2x^ + x). 

4.2 The Euclidean Scheme 

From the existence of a right division algorithm for Ap follows the existence 
of a right Euclidean algorithm. Given /i,/2 G Ap, we proceed with the 
Euclidean scheme in the usual fashion (see van der Waerden [1970] pp. 55). 
Assume expn/i > expn/2. At each stage i > 2, let /j be the remainder of 
fi-2 divided on the right by We get the following sequence: 

/l = Ql O /2 + /3, 

/2 = o /a + /4, 
/a = <52 o /4 + /s, 

fn-2 = Qn~2 ° fn-1 + fn, 
fn-1 = Qn-1 ° fn, 
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where Qi, fi G Ap and expn fi < expn fi-i. The number of steps n is at most 
the exponent of f2- The polynomial afn & Ap, where a G F is such that a/„ 
is monic, is the greatest common (right compositional) divisor or meet of /i 
and /2. We denote the meet /i □ /2. As an example, assume as before that 
F = Z3 and 

/i = + 2x^ + x^ + 2x, 

f2^ X^ + X^ + X. 

Following the Euclidean scheme, 

/i = (x3 + x)o/2 + (2x^ + x), 
/2= {2x^ + x)o{2x^ + x), 
h = + X. 

Normalising to make the meet monic, 

/i n/2 = 2-1(2x3 + x) 
= + 2x. 

The existence of a Euclidean algorithm means is a principal left ideal 
ring. Let /i and be two additive polynomials, and let (/i) and (/2) be 
the left ideals generated by them. The ideal D — (/i) + (/2) consists of all 
sums of left multiples of fi with left multiples of /2. Because kp is principal, 
D = (u) for some unique monic u & Ap and this u is the meet of /i and 
/2. The set L = (/i) n (/2) is also an ideal and consists of all common left 
multiples of /i and /2. Assume /1/2 7^ 0. We must now show that L ^ (0). 
Let D — fi n f2. From the extended Euclidean scheme we know that there 
exist Ai,A2 e Ap such that Ai o f\ +^20/2 = /}. li f2 = R20D for R2 G Ap, 
then R20 Aio fi-\- R20 A20 f2 = /2 and /?2 o ^1 o /i = (x — i?2 o ^2) o /2- Thus 
/i and /2 are both right factors of i?2 o ^1 o /i, and since this is nonzero, 
L 7^ (0). The ring Ap is a principal left ideal ring, so L = (h) for some 
unique monic h G F[x]. This is the common left multiple of /i and /2 of 
least exponent, which we will call the join of fi and f2- We denote the join 
of /i and /2 by /i U /2. Some properties of the join are summarised in the 
following lemma. 
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Lemma 4.1. Let f,g,h^ Ap. 

(i) fUg = gUf, 

(ii) fU{gUh) = {fUg)Uh (we will often write fUgUh), 
(Hi) g U {f o g) = f o g, 

(iv) {goh)U{foh) = {gUf)o h, 

(v) if g ^ f and h ^ f then gUh ^ f. 

Proof. Let (/), {g), (h) be the left ideals generated by /, g, and h respec- 
tively. 

(i) The polynomial f U g is the unique monic generator of the ideal (/) fl 
{g) = (g) n (/), and as intersection is commutative, so is the join. 

(ii) The polynomial f U {g L\ h) is the unique monic generator of the ideal 

(/) n {{g) n (h)) = ((/) n (g)) n (h) = (/) n (g) n (h) and by the 

associativity of intersection, join is associative. 

(iii) Since g i> f o g, {f o g) C (g) and {f o g) n (g) ^(fog). 

(iv) The polynomial {g o h) U [f o h) is the unique monic generator of the 
ideal o h) P[ {g o h) = {u & Kf\u = v o h and v G (/) Pi {g)}-, since 
all common left multiples oi f o h and g o h are also common multiples 
of / and g, composed with h. Since (/) fl (g) has generator f Ug, the 
lemma follows. 

(v) From the fact that {g) D (/) and (h) D (/) it follows that {g)n{h) D (/) 
and therefore that g L\ h if f. □ 

The existence of a join does not give a construction for it. The standard 
commutative construction of the product divided by the greatest common 
divisor is not appropriate in a non-commutative ring. However, an extension 
to the Euclidean scheme will provide a more concrete representation of the 
join. We first require the following theorem. 

Theorem 4.2. Let f,g,hE Ap. If f ^ g mod h then 

fUh^a{{gUh)i>g)of, 
where a E F is such that the join is monic. 

Proof. We know g U h = u o g for some u E Ap. From the assumptions 
f = g + Q oh ioi some Q E Ap and uof = uog + uoQoh. Since h if uo g 
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and h ^ u o Q o h, we know h ^ uo f. Because / (j) -u o / as well, hU f ^ u o f 
by lemma 4.1 (v). We now show that in fact hU f = a{u o /) where a E F 
is such that a{u o /) is monic. Suppose hU f — v o f ior some v & Ap. Then 
hU f = V o f — V o g + V o Q o h and since h ^ vo f and h ^ v oQ o h, it follows 
that /i (j) t; o (yi as well. We know g ^ vo g. sogUh^vog. Since gU h = uo g, 
expnf > cxpnw. Therefore hU f = a{u o /). By definition u = [gUh) </> g, 
sohUf = a{{gUh)^g)of. □ 

The join of fi and /2 can now be written as follows. 
Theorem 4.3. 

hUh^h{---{fn-l<f>fn)0fn-2)<t>fn-l)0---0U)i>U)0f^)</>U)0h 

for some b E F chosen to make the join monic (the alternation of o and ^ 
is similar to the alternation of + and ■ in Horner's rule, and the difference 
between successive indices (from left to right) is +1, —2, +1, —2, +1, ... for 
each of the 2n — 1 terms). 

Proof. In the Euchdean scheme, fi s /j_,_2 mod /j+i for 1 < i < n — 1 (with 
fn+i — 0), where n is the length of the sequence of /j's in the Euclidean 
scheme. Also note that <j> fn-i- From theorem 4.2 this implies that 

fi U fi+i = a((/i+i U fi+2) ^ fi+2) o fi. 

for some a & F. We proceed by induction on n. 

If n = 2 then /i U /2 = /i and the theorem holds immediately. 

Now assume that the theorem holds for Euclidean schemes of length less than 

n. If the Euclidean scheme has length n, then 

/iU/2 = ai([/2U/3]s^S/3)o/i, 

and by induction, 

/i U /2 = ai([a2(- • • (/n-i ^ fn) o fn-2) i> ' ' ' i> fb) o fz) i> fi) o /a] ^ /a) o /i 
= 6(- • • (/„_! 5^5 /„) o /„_2) ^ • • !^ /s) o /3) 5^ A) o /2) /a) o /i 



for appropriate ai,a2,b G F, and the theorem follows. □ 
Theorem 4.3 also allows us to calculate the exponent of the join. 
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Theorem 4.4. expn(/i U = expn/i + expn/2 — expn(/i □ 

Proof. Using the simple fact that expn f o g = expn / + expn g and expn / ^ 
g = expn / — expng, for f,g& Ap, a quick examination of the formula for 
join given in theorem 4.3 reveals that 

expn /i U /2 = expn /i + expn /2 - expn /„ 

= expn /i + expn /2 - expn(/i n /2) 

and the theorem is proved. □ 
Continuing with the previous example, 

/iU/2 = a((/2^/3)oA) 

= a(((2x^ + x)o {2x^ + x)) ^ {2x^ + x)) o /i 
= a{2x^ + x)o {x^^ + 2x^ + x^ + 2x) 
= a{2x^^ + 2x^^ + x^ + 2x^ + 2x) 
= x^^ + x^^ + 2x^ + x^ + x. 

For verification we check that indeed 

x^^ + x^"^ + 2x^ + x^ + x = {x^ + x) O f2 

= {x^ + 2x) o /i. 

If f, g, h & Ap with g ^ and f = g o h, then h is a, multiplicative factor 
as well as a right composition factor of /. Thus, if 

f^Qog + R 

where Q,R E Ap and expni? < expn^f, then 

f-R=Qog 

where Q' — {f — R)/g e F[x]. Therefore / = Q'g + R and usual multiplica- 
tive division in F[x] yields the same remainder as compositional division in 
Ap. This means that the right-Euclidean algorithm for Ap just described 
generates the same sequence of /j's as the usual multiplicative Euclidean 
algorithm (though obviously a different sequence of Qis) and we have the 
following theorem. 
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Theorem 4.5. If fi, /2 € Ap, then /in/2 is equal to the usual multiplicative 
greatest common divisor of fi and f2- 

We can speak of /i and /2 in A^j^ as being composition-coprime if /i H /2 = 
X, and this is equivalent to saying that the usual, multiplicative, greatest 
common divisor of fi and f2 is x. 

4.3 The Structure of the Set of Decompositions 

The set of all distinct complete rational normal decompositions of a given 
additive polynomial has a very strong internal structure. Orc[1933a] devel- 
ops this structure in the general context of non-commutative Icft-Euclidean 
polynomial rings. 

The central concept of Ore's theory is that of transformation. Let f,g& 
Ai? be monic. The monic polynomial 

g\>f^{gUf)<fg e Ap 

is called the transformation of / by g. By theorem 4.4, we determine that 

expn(gf > f) = expn((yf U /) — expng 

= expn g + expn / — expn{g H /) — expn g 
= expn/ - expn(5( n /). 

Obviously, if / and g are composition-coprime then expn(g' > /) = expn/ 
(though g> f certainly does not have to equal /). 

The properties of transformation will be developed in the following few 
theorems. There does not seem to be an easy technique relating these prop- 
erties to the familiar multiplicative identities, say over the integers. Once 
might liken meet to integer greatest common divisor (gcd) and join to least 
common multiple (1cm). In this case transformation becomes 1cm divided by 
gcd. But this is also a commutative construction, which is not the case for 
transformation in the additive polynomials. 

Theorem 4.6. Let f,g,hE Ap be monic. If f s g mod h then f\>h = g\>h. 

Proof. By theorem 4.2, f Uh = {{g Uh) ^ g) o f- Dividing both sides on the 
right by /, we get {f U h) ^ f = {g U h) <^ g (the multiplying constant a e F 
from theorem 4.2 is one since /, g and h are assumed to be monic). Directly, 
we have that f\>h — g>h. □ 
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Theorem 4.7. Let f,g,h& Ap be monic. If h if f o g then 
(i) ig>h) if f, and 

(a) if f is indecomposable, gHh — x, and h ^ x, then g> h = f. 
Proof. 

(i) The polynomials g and h are both right factors oi f o g^ so there exists 
au & Ap such that fog = uo{gUh). Thus 

f^{uo{gUh))i>g 
— uo [g\>h). 

(ii) As / is indecomposable and gVAh = x^vfe know expn((yf > h) = expn h. 
From (i), (g > h) <j) / and since cxpn/i = expn(gf > h) > and / is 
indecomposable, {g > h) = f. □ 

Two monic additive polynomials f,g & Ap are said to be similar if there 
exists a. u E Ap composition-coprime with g such that f = u> g. To denote 
similarity we write f ^ g. Note that if / and g are similar then expn / = 
expn g. We will show that similarity is an equivalence relation. First, we 
must prove a preliminary lemma. 

Lemma 4.8. Let f,g,hE Ap be monic. Then {g o h) > f — g > {h> f). 
Proof. 

{goh)t>f={{goh)Uf)^{goh) 

^{{goh)UhUf)i>{goh) 
^{{goh)U{hUf))i>h)i>g 
^{gU{{hUf)i>h))i>g 
^g>{h>f). □ 
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Theorem 4.9. Similarity is an equivalence relation. 
Proof. Let f,g,h& Ap be monic. 

(i) Similarity is reflexive since x> f — f. 

(ii) Assume / ~ 5^, so that f = u> g for some u E Ap such that uH g = x. 
As u and g are composition- coprime, there exist Q,v e A^;' such that 

vou + Qog — X. 

Therefore v o us x mod g. We have 

g = X t> g = {v o u) > g by theorem 4.6 
= f > (m > gf) by lemma 4.8 
= v>f, 

and (yf ~ /, so similarity is symmetric. 

(iii) Assume f ^ g and g ^ h. Then there exist u,v E Ap such that 
Mngf = a;, / = M>5', t'n/i = a;, and g = v > h. By lemma 4.8, 

= O > /i. 

Because /i and / have the same exponent, {u ov) n h — x and h f . 
Thus similarity is transitive. 

By (i), (ii), and (iii) above, similarity is an equivalence relation. □ 

An interesting case is that of the additive polynomial x^, which has the 
following property. 

Lemma 4.10. The only additive polynomial similar to x^ e Ap is x^. 

Proof. Let u & Ap he monic and composition-coprime with x^. Thus, u is 
simple {u is monic and u{0) = 0). Since uUx^ = wox^ for some w G Ap. uUx/ 
is not simple. We also know that uU x^ = v o u for some v = x^ + ax E Ap 
for some a E F. As m is simple and v o u is not simple, v = x^. Therefore 
uU x^ — x^ ou and u> x^ — x^. □ 

A further property of transformation is that the transformation of a join is 
simply the transformation of its components. 
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Theorem 4.11. Let f,g,h e be monic. Then h>{fL\g) = {h>f)L\{h>g). 
Proof. We know 

{h>{fUg))oh^{{hU{fUg))^h)oh 
^{hUifUg)) 
= (/i U /) U {h U g) 
^{{{hUf)^h)U{{hUg)^h))oh. 

Dividing on the right by h we get 

h>{fUg) = {ht>f)U{ht>g). □ 



Transformation will later be used to characterise the different decompo- 
sitions of a given additive polynomial. It will be useful to know the effect of 
transformation on a composition of additive polynomials. 

Theorem 4.12. Let f,g,h G Ap be monic. Then h> {f o g) = ((g> h)> f) o 
{h>g). 

Proof. We know that 

h>{f o g) = ht>{{f o g)Ug) 

= {h> {f o g)) U [h> g) (by theorem 4.11) 
= Qo{ht>g) 

for some Q e Ap- This implies Q o [hU g) — hU [f o g) and 

Qo{g>h) = {hU{fog))^g 

^{gU{hU{fog)))^g 

^g>ihU{fog)) 

= (g>h)U(g>{fog)) 

= {g>h)U{{gU{fog))^g) 

= (g>h)uf. 

Therefore, Q = {g> h)> f and the theorem follows. □ 

This theorem can be easily extended to consider the transformation of a 
composition of many polynomials. 
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Theorem 4.13. Let f E Ap be monic. Assume f = fm° fm-i°- ■ ■°fi where 
fi & Ap are monic for 1 < i < m. Let h E Ap be monic and composition- 
coprime with f. If hi e A^^ is defined by 

^ _ r {fi-i o fi-2 o • • • o /i) > /i fori> 1, 
' I h for i = 1, 

for 1 < i < m then 

h>f = fmOfm-lO---ofl: 

where fi^ hi> fi. 

Proof. We proceed by induction on m. If m = 1 then h> fi = fi. Assume 
the theorem is true if the number of factors is less than m and that m > 1. 
From theorem 4.12, 

h>f^h\> {{fm o fm-i ■■■0/2)0 /i) 

= ((/l > /l) > (/m O • • • O /2)) o(h> fi). 

Since h and / are composition-coprime, expn h> f = expn /. Therefore, by 
computing the exponents of each side of the above equation, we have 

expn(/^ o ■ ■ ■ o /a) = expn((/i > /i) > (/^ o ■ ■ ■ o f^)), 
and (/i > h) and /m ° • • • ° /2 must be composition-coprime. By induction, 

(/l > h)> {fmO ■ ■ ■ f2) = fmO fm-1 O ■ • • O 

with fi — hi\> fi ioY 2 < i < m where hi is defined by 

r (/i-i o /i_2 o • • • o /a) > (/i > /i) for i > 2 
hi = \ 

[ fi>h for i = 2 

= (/i_io---o/2)>/i (by lemma 4.8), 

and the theorem follows. □ 

The above theorems consider the transformations of arbitrary decompo- 
sitions. What are the effects of transformation on complete decompositions? 
We first need to know the relationship between the decompositions of similar 
additive polynomials. 
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Theorem 4.14. If f, g G Ap, f ^ g and f is indecomposable, then g is 
indecomposable. 

Proof. Assume f — u> g for some u e Ap composition-coprime with g. 
Suppose that g = g2 ° 91, where expn(72 > and expngi > (so g is 
decomposable). By theorem 4.12, / = {{gi>u)>g2)o{u>gi). The polynomials 
u and gi are composition-coprime because u and g are composition-coprime 
and gi ^ g. It follows that u> gi gi and expn w > gi — expn gi. Therefore 
exp'n.{{gi>u)>g2) — expn g2 and / is decomposable, a contradiction. Therefore 
g is indecomposable. □ 

Prom 4.13 and 4.14 we immediately get the following theorem. 

Theorem 4.15. If (/, (/^, . . . , /i)) G cAPDEC^ and g ^ f (say g = ut>f), 
then there exists (g, {g„i, . . . ,gi)) G cAPDEC^ where gi ~ fi for 1 < i < m 
(specifically, gi = u> fi for some u & Ap and g^ = {{fi-i ° ■ ■ ■ ° fi) > u) > fi 
for 2 < i < m). 

Proof. By theorem 4.13 we transform the composition, giving a decomposi- 
tion of g. The fact that this is a complete decomposition follows from 4.14. 

□ 

Transformation and similarity can be used to completely characterise the 
relationship between decompositions. Let f,g & Ap be monic. If there exists 
a monic f E Ap such that f ^ f and f = g > f, we say / and g are 
transmutable or that they transmute. The additive polynomial / is called a 
transmutation of / by g. In this case, 

fog={g>f)og 

= {{gUf)^g)og 

= 9^1 

= {{fUg)i>f)of 
= {f>9)of 
^ 9°f 

where g = f > g E Ap. Because f ^ f, f and / have the same exponent and 
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so g and g also have the same exponent. We know 

expn(/ U g) — expn / + expn g — expn(/ □ g) 
= expn(/o5() 
= expn(/ogr) 
= expn / + expn g. 

Thus expn f H g — and g ^ g. 

There is no reason why there cannot exist an / G such that f ^ f , f ^ f 
and f = g t> f- The transmutation of f hj g is not unique. Consider the 
following example over an arbitrary field F of characteristic p. 

f — + ax a E F 
g^x^ + bx be F 

Then fog — x^^ + (a + lf)xP + abx. Assume f o g = g o f where 

f = x^ + ax a e F 
g ^ x^ + bx be F 

This implies b -\- aP — a -\- If and ab — ab. Thus 

— ab — ab 
^ ab- a{-aF + a + 6^) 
= a6 + 0^+^ -aa-Fa 
— a{b — a) — a{b — a)^ 
= {b-a){a-a{b-ay-^), 

and either f = g and / = gf, or a is a root of ip = a — x{h — xY~^ G F[x\ {g 
is uniquely determined as ^ = {fog) ^ /))• Noting that 

f = {9° f)^ 9 
^ (9^ (g •=> D) ^ 9 since g^gof 

^ 9>{9° f) 

= g>{{gof)Uf) 

= gt>{go f)u{g> f) 

^fU{g>f), 
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and expn/ = expn^f > / = 1, it follows that / = (?>/, so / ~/ and 
the transmutation of / by is /. Since the argument can be reversed, it 
implies that the polynomial / can transmute by g in up to p different ways, 
depending upon the roots of (p in F. 

A point worth noting is that does not transmute by x^. By lemma 
4.10, the only polynomial similar to is x^. If x^ did transmute by x^, then 

= x^^ = {x^^ U x^) ^ x'^ = X, a. contradiction. 

The set of all complete decompositions of / e can be given structure 
using transmutation and similarity. Let (/, (J^, fm-i, ■ ■ ■ , /i)) £ cAPDEC^ . 

If fi and fi-i o fi_2 o ■ ■ ■ o ff transmute for some z, £ G N with m > i > £ > 1 
then we get another complete decomposition of /. As in theorem 4.13, this 
is 

if: {fm: /m-1, ■ ■ ■ , fi+1: fi-1: ■ ■ ■ , fl, fi, ft-1, ■ ■ ■ , /l)) £ cAPDEC^ . 

where fj ~ fj for £ < j < i. We say these two decompositions arc single- 
transmutation equivalent. Letting (/, {fj^K ■ ■ ■ , /i^"*)) ^ cAPDEC^ , if there 
is a sequence 

(HO) Aoh 

\J m ■>■■■■> J 1 ) 

{fm 1 • • • 1 fl ) 

(fit) f(*)) 
\J m 1 ■ ■ ■ 1 J I I 

where (/, {f^, .. . , /«)) e cAPDEC^ for 1 < i < and (/«,..., f?) and 
iflh^^^ . . . , fi~^^^) are single-transmutation equivalent for 1 < i < we say 
that /^°) , • • • , and /^^ , • • • , /i*'' arc transmutation equivalent. Transmu- 
tation equivalence is the reflexive transitive closure of single-transmutation 
equivalence. 

Theorem 4.16. All complete rational normal decompositions of a monic 
f & Ap are transmutation equivalent. 

Proof. Let (/, (/^, . . . , /i)) = (/, ■ ■ ■ , /f)) and (/, (5,, . . . , ^0) for 
r, m e N be complete rational normal decompositions of /. We prove the 
theorem by induction on m. If m = 1 then / is indecomposable and fi — gi, 
so the statement is true. 
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Assume the theorem is true for complete decompositions of length less 
than m. Let /c G N be the smallest number such that gi if (/^ o /^_^ o - ■ - o fi). 
li k — 1 then fi — gi (they are both indecomposable), and by induction (/ ^ 
S'l, (/m, • • • , /2)) and (/ ^ gi,{gr, . . . ,g2)) G cAPDEC^ are transmutation 
equivalent. Therefore (/, . . . , /i)) and (/, [gr, ■ ■ ■ , gi)) are transmutation 
equivalent. 

If > 1 then o /fc_2 o ■ ■ ■ o fi and gi are composition-coprime. By 
theorem 4.7(ii), 

fk = (/fe-i o /ifc-2 o • • • o /i) > S'l, 
fk ^ 91, and and (/fc-i o • • • o /i) are transmutable. Therefore 

/fe o o • • • o /i = (S-I > (/fc-i o • • • o /i)) o 5-1 
by theorem 4.13, where /i ~ /i for 1 < i < A; — 1. Thus 

(/) {fm, fm-l, ■ ■ ■ , fk+l, fk-1, ■ ■ ■ , fl, 9l)) 

and (/, {fm, ■ ■ ■ , fl)) are single-transmutation equivalent. Also, by the induc- 
tive hypothesis, (/ ^ gi, {fm, fm-i, fk+i,fk-i, fi)) and (/ ^ g-i, {gr, 
are transmutation equivalent. Therefore (/, {fm, ■ ■ ■ , fi)) and (/, {gr, ■ ■ ■ , gi)) 
are transmutation equivalent and the theorem follows. □ 

Any two single-transmutation equivalent decompositions have the same 
number of indecomposable factors in any complete decomposition, and these 
factors are similar in pairs. Since similarity is transitive, we immediately get 
the following corollary. 

CoroUeiry 4.17. Any two complete decompositions of f G A^;' have the 
same number of factors and if (/, {fm,, fm-i, ■■■,fi)), (/, {9m, 9m-i, 9i)) ^ 
cAPDEC^ for some m > 0, there exists a permutation a of {1, ... , m} such 
that gi ~ ftji for 1 < i < m,. 

4.4 Completely Reducible Additive Polynomials 

A monic additive polynomial is said to be completely reducible if it is the 
join of a set of indecomposable additive polynomials. Completely reducible 
additive polynomials have a number of nice properties which we will examine 
mathematically and algorithmically. 
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Lemma 4.18. A completely reducible polynomial f e can be repre- 
sented in the form 

f = hrL\ hr-1 U • • • U /ii 

where, for 1 < i < r , hi is indecomposable and no one of the hi's is a right 
composition factor of the join of the others. This is called an indecomposable 
basis of f. 

Proof. Let / e Ap be completely reducible and let Wi, ^2, ■ ■ ■ , e Ap be the 

indecomposable right factors of /. We know that / is the join of these right 
factors by the definition of completely reducible, and that there is a finite 
number of them since they are all multiplicative divisors of /. Consider the 
following method for determining an indecomposable basis for /. 

1) Let T := 

2) Let := x 

3) For i from 1 to m 

3.1) if Ui\l g'^'-^^ = X then 

3.1.1) let — g('-'^^UUi 

3.1.2) let T -.^TUiui} 
else 

3.1.3) let := g^'''^^ 

3.2) if g(^'>^f, then quit, returning T 

At step 3.1, we know that if Ui □ g^'^~^^ ^ x then Ui <j> g^'^~^^ for i > 1 
because Ui is indecomposable. In this case it will not change the join g^^~^^ 
and is redundant. Because / is the join of all its indecomposable right factors, 
gik) _ j some k < m. From the construction, the exponent of the join 
of the polynomials in T is the sum of the exponents of these polynomials. 
By theorem 4.4, therefore, any one polynomial in T is composition-coprime 
with the join of the others in T. □ 

Note that we can choose any indecomposable right factor ui we want in the 
above procedure. 

A polynomial / e Ap is said to be completely transmutable if in any 
complete decomposition, any two adjacent indecomposable factors are trans- 
mutable. 



78 



Mark Giesbrecht 



Theorem 4.19. An additive polynomial is completely reducible if and only 

if it is completely transmutable. 

Proof. We first show that if / G is completely reducible then it is com- 
pletely transmutable. We proceed by induction on the number of indecom- 
posable factors in a complete decomposition of /. Assume f = gi E Ap, 
where gi is indecomposable. Then / is completely transmutable. Now, as- 
sume the statement is true if / has less than m indecomposable factors in any 
complete decomposition. Let f = gm° Qm-i ° ' ' ' ° Oi = 9 ° Oi where g^ E Ap 
are indecomposable for 1 < i < m and m > 2, and g = f ^ gi E Ap- As 
/ is completely reducible, it has an indecomposable basis {gi, /12, /is, • • • , h^} 
with hi E Ap indecomposable for 2 < i < We get 

g = {{he U ■ ■ ■ U /12) U ^1) ^ ^1 
= gi>{heU---Uh2) 
= {gi > hi) U (^1 > he-i) U • • • U (^i > /ia) 

and ^ ~ {hiU - ■ - Uhi). Thus, g is completely reducible and, by the inductive 
assumption, completely transmutable. We have shown the leftmost m — 1 
factors of any complete decomposition of / are completely transmutable. 
Now we need only show that gi and g2 arc transmutable. We know g2 ^ 
g = gi> {he U ■ ■ ■ U h2)- By theorem 4.15, all complete decompositions of 
gi> {h^U ■ • ■ U h2) are simply decompositions of /i^ U • • • U /i2 transformed by 
gi {gi and {h^ U ■ ■ ■ U /t2) are composition-coprime) . Therefore, g2 — gi > u 
for some u G similar to g2, and gi and (72 are transmutable. Thus, any 
completely reducible additive polynomial is completely transmutable. 

We now show that if / G Ap is completely transmutable then / is com- 
pletely reducible. Once again we prove this by induction on the number of 
indecomposable factors in a complete decomposition of /. li f — gi, where 
gi E Ap is indecomposable, then / is obviously completely reducible. Assume 
the statement holds if / has fewer than m factors in a complete decomposi- 
tion. Then assume f = gm ° fl'm-i o ■ ■ ■ o gi where gi E Ap for 1 < i < m. 
Also, let g = gm ° Qm-i o • • • o g2- Since g is completely transmutable, it is 
completely reducible by the inductive assumption, so g — h^U- ■ •Uh2 where 
£ G N is greater than two and h2, ■ ■ ■ ,he E Ap are indecomposable. Each 
of the hi are indecomposable right factors of g and because / is completely 
transmutable, each of the /i^'s can be transmuted with g^. Thus, hi = gi>hi 
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for some hi ^ Ap, hi ^ hi ior 1 < i < £. Therefore 

f ^ 9 ° 9i ^ {heU hi-i U • • • U /i2) o S'l 

= {{gi > h) U {gi > he-i) U---U{gi> hi)) o gi 
= heUhe_iU---Uh2Ugi, 

and since the hi are indecomposable ior 2 < i < i and gi is indecomposable, 
/ is completely reducible. □ 

Note that since does not transmute with itself, this theorem implies 
that any completely reducible polynomial can have at most one composition 
factor in an arbitrary complete decomposition. 

A strong relationship exists between the composition factors of an arbitrary 
complete decomposition and an arbitrary indecomposable basis. 

Theorem 4.20. Let f G Ap be completely reducible, (/, {fm, fm-i, ■ ■ ■ , fi)) G 
cAPDEC^ , and hi,...,h(, be an indecomposable basis for f. Then m — £ 
and there exists a permutation a of {!,..., m} such that hi ~ /o-. for 
\ <i <m. 

Proof. Wc proceed by induction on m. If m = 1, then / is indecomposable, 
and £ = 1 and o is the identity permutation. Now assume the hypothesis is 
true for all complete decompositions of length less than m. Let / G Ai? be 
completely reducible, (/, (/^, . . . , /i)) G cAPDEC^, and /ii, . . . , /i^ be 
an indecomposable basis for /. Since hi is an indecomposable right factor 
of /, there exists a decomposition (/,(/„, /2, ^i)) € cAPDECf 
and by corollary 4.17 a permutation r of {1, . . . ,m} such that f- ~ for 
1 <t < m. Now, (/ ^ hi,{fUJL-i:---J2)) e cAPDEC^ and by the 
inductive assumption, 

f ^ hi^ hiU{heU he-i U ■ ■ ■ U /i2) Ml 
^ hiO {hi U hi^i U ■ ■ ■ U /la) 
= {hi > hi) U {hi > hi_i) U • • • U (/ii > /ia), 

giving an indecomposable basis for f hi. By the inductive hypothesis 
£ — l= m — lsom = £ and there exists a permutation /i of {2, ... , m} such 
that hi ~ /^^ for 2 < i < m. Extending this to a permutation /2 of {1, ... , m} 
by letting /ii = 1 we find that a = rfi has the property that hi ~ ~ /o-^ 
for 1 < i < m. □ 
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4.5 The Uniqueness of Transmutation 

A question which will concern us algorithmically is that of the uniqueness 
of transmutation. We can characterise how additive polynomials trans- 
mute in terms of the similar factors in an arbitrary complete decomposi- 
tion. Let g e Ap be monic of exponent u with complete decomposition 
{g, {gm, gm-i, ■ ■ ■ ,gi)) £ cAPDEC^ . Let / G Ai? be monic and indecompos- 
able. Assume that / transmutes by g in two distinct ways, say f = g> f for 
/ e Ap, / ~ /, and / = c/ > / for / e A^, / ~ /, and f f. Then f o g has 
complete decompositions (/ o g, [g^, /)) where gi e Ap and gi ~ gi 

for 1 < i < m and (/ o g, {g^, ...,gi, /)) where gi e Ap and en ~ gi for 
1 < i < m. We know f ^ f o g. Let A; G N be the smallest number such that 
/ ^ (jkogk-io- ■ -ogiof (/ does not divide /). Then / and gk-iogk-2°- ■ -ojio/ 
are composition-coprime and by theorem 4.7, g^ = {gk-i o ■ ■ ■ o gi) > / and 
9k ^ f- We have the following theorem: 

Theorem 4.21. Let f,g e Ap be monic with {g, {g^^, . . . , gi)) G cAPDEC^ 
and f indecomposable. If f and g transmute in two or more distinct ways, 
then f ^ gi for some i such that 1 <i <m. 

We can further characterise when non-unique transmutations occur by 
showing the following theorem about transmutations in general. 

Theorem 4.22. Let /, g, h G Ap be monic. If f transmutes by g o h with 
transmutation f, then f and g transmute, and if a transmutation of f by g 
is f , then f and h transmute as well. 

Proof. U f = {goh)>f, then f = g>{h> f) hj lemma 4.8. Since / and goh 
are composition-coprime, / and h are composition-coprime. Let f = h> f. 
Then / transmutes with g since f — g> f- Furthermore, because f — h> f, 
f and h transmute. □ 

This theorem can be extended to the case when / transmutes by hm o hm-i o 
■ ■ ■ o hi. 

Theorem 4.23. Let /, hi e Ap for 1 < i < m. If f transmutes by h — 
hm ° ^m-i o ■ • • ohi, then 

(i) f transmutes by hm, with transmutation G A^;', for some f^'^^ ~ 
/, and 

(a) for m > i > 1, /*^*) transmutes by hi-i with transmutation f^^~^^ G 
Ap for some Z*-*"^-* ~ /. 
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Proof. We proceed by induction on m. The base case, where m = 2 follows 
directly from theorem 4.22. Assume the theorem holds if h is given as a 
composition of less than m factors. If h is given as a composition of m 
factors then by theorem 4.22 / transmutes by hm ■ Let f^"^^ e Ap be the 
transmutation of / by h„i. Also by theorem 4.22, /*^™) transmutes with 
hm-i o ■ ■ ■ o hi. By the inductive hypothesis, f^"^^ transmutes by /im-i with 
some transmutation /(™-'~^) ~ / and for m — 1 > i > 1, /'•^^ transmutes by 
with some transmutation /^*~^^ ~ /^"^^ ~ /. □ 

If / transmutes by h in two distinct ways, then for an arbitrary decom- 
position {h,{hm,hm-i, ■ ■ ■ ,hi)) e cAPDEC^ , f transmutes by each hi in 
turn for m > i > 1. Which transmutation of / by is obtained is deter- 
mined entirely by the transmutation of Z*^*) by for 1 < i < m. Since the 
transmutation of f^^^ by hi is unique if Z*^*-* oo hi, the transmutation of / by 
h is determined completely by the transmutation of /^*^ by /i^ for 1 < i < m 
when ~ hi. With this in mind, we define an additive polynomial f E Ap 
to be similarity free if in an arbitrary complete decomposition, no two of the 
composition factors are similar. In a similarity free additive polynomial, all 
transmutations of the factors are unique. 

The previous theorem also allows us to strengthen theorem 4.16 of Ore's. 
We say two complete decompositions (/, . . . , /i)) and (/, {gm, ■ ■ ■ , Qi)) 

in cAPDEC^ are single-indecomposable-transmutation equivalent if fi — Qi 
for 1 < i < m or there exists an £ e N with 1 < £ < m such that 

(/) {g-m-, ■ ■ ■ ,9i+i,9e,9e-i,ge-2, ■ ■ ■ ,gi)) = (/, {fm, ■ ■ ■ , fe+i, fe-i, fe, fi-2, ■ ■ ■ ,/i)) 

where fi ~ fi is the transmutation of fi by and fi^i = fi> fi-i ~ fi-i- 
We define indecomposable-transmutation equivalence as the reflexive tran- 
sitive closure of single-indecomposable-transmutation equivalence. Thus, two 
decompositions are indecomposable-transmutation equivalent if one can be 
obtained from the other by a sequence of transmutations of adjacent inde- 
composable factors. 

Theorem 4.24. Two complete decompositions are indecomposable- trans- 
mutation equivalent if and only if they are transmutation equivalent. 

Proof. If two complete decompositions are indecomposable-transmutation 
equivalent, then they are transmutation equivalent. By theorem 4.23, any 
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transmutation of an indecomposable additive polynomial with a composi- 
tion of indecomposable polynomials is equivalent to a sequence of trans- 
mutations with each of the indecomposable factors in turn. Thus, single- 
transmutation equivalent decompositions are indecomposable-transmutation 
equivalent. Since transmutation equivalence is just the reflexive transitive 
closure of single-transmutation equivalence, transmutation equivalent decom- 
positions must be indecomposable-transmutation equivalent. □ 

As an immediate corollary we get a stronger version of theorem 4.16. 

Corollary 4.25. All complete decompositions of an additive polynomial f e 
Ap in cAPDEC^ are indecomposable-transmutation equivalent. 
Prom now on we will simply say two complete decompositions are transmu- 
tation equivalent to mean indecomposable-transmutation equivalent. 



4.6 The Number of Complete Decompositions 

Using the methods from chapter 3 as well as the material from this chapter, 
we can now prove an upper bound on the number of complete decompositions 
of a (not necessarily simple) additive polynomial. 

Let f E Ap he monic of degree n = ]f . Then f = g o where g G Ap 
is simple and ^ > 0. Prom theorem 3.10, we know that g has at most n^^°^'" 
complete decompositions in cSAPDEC^ where /x = {2\ogp)~^. Por each 
decomposition [g, {gm, gm-i, ■ ■ ■ , gi)) G cSAPDEC^ , f has a decomposition 

i times 

(/, {g^,gm-i,...,gi,^^^^C^))&cAPDEC^. 

Without changing the order of the g^j's for m > i > 1, and allowing for 
transformations into similar factors, we can distribute the indecomposable 
factors x^ throughout the decomposition of /. There are up to 




such distributions. We know these arc all the decompositions because all de- 
compositions of additive polynomials are transmutation equivalent. Because 
there are n'^'°s" complete decompositions oi g E cSAPDEC^ , there are at 
most complete decompositions of / e cAPDEC^ . We have shown 

the following generahsation of lemma 3.10. 
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Theorem 4.26. If f E Ap has degree n, then f has at most n^+i^^<^sn jg_ 
compositions in cAPDEC^ . 

Note that in the case of a perfect field F, for any u G Ap, we know 
1 _ _ 1 

u o — o UP — x^ o u where u — up o x^ Ap- In this case there are, 

therefore, exactly (j"^^^ times as many complete decomposition of / than of 
g in cAPDEC^. 
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5 Decomposing Additive Polynomials 

5.1 The Model of Computation 

The model of computation used in this chapter is the "arithmetic Boolean 
circuit" as described in chapter 2, section A. Once again, let Spin) be the 
number of field operations required to factor an arbitrary univariate poly- 
nomial / e F[x] of degree n into irreducible factors (where F is a field 
of characteristic p). In this chapter, Si?(n) is assumed to be polynomially 
bounded. It is also assumed to satisfy the property that for p,i/ &N, 

Y: S^(p0 = O(S^(p^)). 

0<i<i/ 

The following theorem will also be useful in the analysis of some of our 
algorithms. 

Lemma 5.1. If p, i/, d e N with p>2 and v > 1, then 

l<i<v 

Proof. We proceed by induction on u. If u = 1 then the theorem is trivially 
true. Assume it is true for u < k. Then 

l<i<k l<i<k-l 

< 3ik - i)y-^ + fcV 

< (3/2) A; V + kY 

< 3A;V, 

and the theorem holds for all v >1. □ 

5.2 The Cost of Basic Operations in Aj?^. 

Let f,g & Ap be of exponents u and p respectively, and max(z/, p) < 6. The 
following analyses of the basic operations in Ap are probably not optimal, 
but will be sufficient for our purposes. 

Lemma 5.2. (Composition) Computing fog requires at most 0{d^logp) 
Geld operations. 
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Proof. Each coefficient of g must be raised to the p*th power for < i < 
u <6. This requires 0{pdlogp) = 0{S^logp) field operations. □ 

Lemma 5.3. (Division with remainder) If g ^ 0, computing Q,R E Ap such 
that f = Q o g + R and expn R < expn g requires 0(6'^ logp) field operations. 

Proof. The cost of computing right division with remainder is dominated by 
the cost of raising g (and hence each coefficient of g) to the p*th power for < 
i < p — p. This requires 0{p{u — p) logp) = 0(5^ logp) field operations. □ 

Lemma 5.4. (Meet) Computing f VA g requires 0{S^logp) field operations. 

Proof. In the Euchdean scheme described in the previous section, each step 
involves right division with remainder of additive polynomials with exponent 
at most S. There are at most S steps. Therefore we can compute the meet 
of / and g with 0{S^logp) divisions. □ 

Lemma 5.5. (Join) Computing f U g requires 0{S^logp) field operations. 

Proof. Using the formula of theorem 4.3, we must ffist compute the /^'s of the 
Euclidean scheme. This requires 0(i/^logp) field operations by the previous 
lemma. Computing the join then requires at most 5 divisions and 5 composi- 
tions of polynomials with exponents not exceeding 2S. Thus, computing the 
join requires 0{S^logp) + SO{{2S)^logp) — 0{S^logp) field operations. □ 

Lemma 5.6. (Transformation) Computing f > g requires 0{S^logp) field 
operations. 

Proof. By definition ft>g = {f\Jg)^f, and the number of field operations 
involved is dominated by the number of field operations required to compute 
the join, which is 0{d^logp). □ 

5.3 The Minimal Additive Multiple 

Let / be an arbitrary monic polynomial in F[x]. A concept which will prove 
extremely useful when dealing computationally with additive polynomials is 
that of the minimal additive multiple f & Ap oi f. This is the monic additive 
polynomial of smallest exponent such that / is a multiple of /. The idea of 
a minimal additive multiple first appears in Ore [1933b]. 

If / = 0, then / = / = G Ap. li f E Vp does not equal zero, the 
following algorithm computes the minimal additive multiple / of /. 
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MinAddMult : Pp ^ Ap 

Input: - f EVp of degree n > 1. 

Output: - f^Ap, the minimal additive multiple of /. 

1) For i from to n, 

1.1) compute hi = x^' mod / 

where hi G F[x] and deg hi < degf . 

2) Let /c G N be the smallest number with < k < n 
such that there exists cto, ai, . . . , a^-i G F 

such that hk = J2o<j<k C(jhj ■ 

3) Return / = x^'' — Y.o<j<k cnjx^ . 

We know / is a multiple of / because 

0<j<k 

0<j<fc 

= mod /. 

The existence of any additive multiple of / with exponent I < k would imply 
ho, ■ ■ ■ ,he are linearly dependent, which is false. Thus / is the minimal 
additive multiple of /. We know a solution always exists since n + 1 vectors 
in must be linearly dependent. 

The number of field operations to compute hj for < j < n is 0{nM[n) logp). 
The determination of k can be done by a modified Gaussian elimination on 
the n X n matrix H where Hij is the coefficient of ,t* in hj for < i,j < n. 
We proceed in stages from to n — 1. Let H'^^^ = H. At stage £ (with 
< £ < n) we perform Guassian elimination on rows zero through £ of H^^"* 
obtaining (leaving rows i. through n — 1 unchanged). If, at the 

end of stage I, row £ of has all entries zero, then rows zero through i 

of H are linearly dependent and we can return k — i. At each stage of this 
elimination we only perform a row operation on row i, so each stage requires 
O(n^) field operations over F. The complete procedure then requires O(n^) 
field operations. Given k, it is simple linear algebra to find ao, ai, . . . , ak-i 
such that hk — J2o<j<k'^jhj- This also require 0{n^) field operations. We 
get the following theorem: 
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Theorem 5.7. Let f G F[x] he monic of degree n. The minimal additive 
multiple f E A^- of f can he determined in 0{n^) field operations. 

If / is also an additive multiple of /, then by theorem 4.5, h = f VA f 
is equal to the multiplicative greatest common divisor of / and /. Thus / 
divides f VA f and this is an additive multiple of /. But / is the minimal 
additive multiple of / so / = / □ / and /<!>/. We have shown the following: 

Theorem 5.8. If f e Ap is tlie minimal additive multiple of f e F[x] and 
f is a monic additive multiple of f, then f ^ f . 

Another characterisation of the minimal additive multiple of / G P^,- can 
be obtained by looking at the roots of / in its splitting field K. Assume / is 
squarefree and has roots {^^i, . . . , On} and minimal additive multiple h. Then 
/ must have an additive multiple g G A^^- such that 

g = {{xp - er^x) u {xp - er^x) u---u{xp- ep-^x)) e ak. 

The polynomial g is an additive multiple of / because all roots of / are 
roots of g, and g is additive. Also, g ^ h because for each root 9i of /, k9i 
must be a root of h for each A; G Zp and 1 < i < n. The one dimensional 
vector space Vi = {kdi \ k G Zp} is a subspace of the kernel of h, and the 
polynomial gi = — 6f~^x has Vi as its kernel. So gi ^ h for 1 < i < n 
and therefore g = [gi U g2 U ■ ■ ■ U g^) ^ h as well (see lemma 4.1(v)). The 
coefficients of g are symmetric functions (over F) of the ^j's for 1 < i < n. 
Each automorphism of K relative to F carries the set of roots of / into 
itself. Thus, each automorphism leaves the coefficients of g fixed, and these 
coefficients must therefore be in F. It follows that g G F[x], and since g 
right divides h (the minimal additive multiple of /), g is equal to h. This 
also means that the exponent of the minimal additive multiple / is exactly 
the dimension of the hnear span of the roots of / considered as a Zj, vector 
space in K. 

An interesting case is when / is a normal polynomial in Zp[x] (a normal 
polynomial is an irreducible polynomial such that its roots [in some fixed 
algebraic closure of Zp] form a basis over Zp for its splitting field). The 
dimension of the Zp vector space spanned by the roots of / is therefore 
the degree of /. It follows that the normal polynomials of degree n are 
exactly those irreducible polynomials whose minimal additive multiples have 
exponent n. 
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5.4 Complete Rational Decomposition of Additive Polynomials 

Assume the field F supports a polynomial factorisation algorithm. The pre- 
ceding method for finding minimal additive multiples can be used to build a 
polynomial time algorithm for finding rational complete normal decomposi- 
tions of additive polynomials in a polynomial number of field operations. 

First we present an algorithm for finding the set of indecomposable right 
composition factors of / G A^?. 

FindlndecRightFactors : Af^P{Af) 

Input: - f E Ap , a monic additive polynomial. 
Output: - H = {hi, . . . , hi} , the set of indecomposable 
right composition factors of /. 

1) Factor / such that / = x'^'^hl^hl'' • • • 

where hi G F[x] are distinct, monic and irreducible and 
G N \ {0} for < i < m. 

2) Let J := {h\h is the minimal additive multiple of 

hi for some i such that 1 <i <i}- 
Assume J = {gi, . . . , ge} for some £gN 

and is indexed such that if i <j then expng^j < expngj 
for l<i<i. 

3) For 1 < i < j < i , if gi if' gj , mark gj . 

4) Let H — {g E J \g not marked in step 3} . 

5) Return H. 

To show correctness we must prove that g E H ii and only if g is an 
indecomposable right composition factor of /. If (? G Ai? is an indecomposable 
right factor of /, then, since g is also a multiplicative factor of /, each 
irreducible multiplicative factor h & F[x\ oi g is an irreducible multiplicative 
factor of /. We know that the minimal additive multiple h & Ap oi any such h 
right divides g by theorem 5.8, and as g is indecomposable, h — g. Therefore 
g will never be marked in step 3 and g E H. Assume, on the other hand, that 
g E H. Suppose that g is decomposable and h is an indecomposable right 
composition factor of g. Then h is an indecomposable right factor of / and 
h E H as shown above. In step 3, g would be marked as decomposable and 
would not be in H, a contradiction. Therefore, each g e H is indecomposable 
and the algorithm works correctly. 

Wc now analyse the number of field operations required by the procedure 
FindlndecRightFactors. For / G Aj? of degree n = consider computing 
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FindIndecRightFactors(/). The factorisation in step 1 requires 0{SF{n)) 
field operations. In step 2 we find additive multiples of each of the indecom- 
posable right factors of /. The worst case occurs when there is one factor of 
degree n — 1. Thus, step 2 requires 0{n^) field operations. The number of 
operations required in the remaining steps is dominated by the requirements 
of steps 1 and 2, so we have the following: 

Lemma 5.9. Given f e F[x] of degree n we can compute all the indecom- 
posable right factors of f in 0(Si?(n) + n^) field operations. 

Now consider the following algorithm for generating a complete decom- 
position of / in cAPDEC^. 

CompleteDecomposition: Aj? — )■ cAPDEC^ 

Input: - f & , a monic additive polynomial. 
Output: - a complete decomposition of / in cAPDEC^ . 

1) Using FindRightlndecFactors, find the set H of 
indecomposable right factors of /. Assume 

H = {h,,...M}- 

2) If hi = f 

then / is indecomposable, Return {f,{f))- 
else 

2.1) Let D :=CompleteDecomposition(/ ^ /ii) . 

We know D ^ {f ^ hi, {ut, ui)) e cAPDEC^ 
for some t G N \ {0}. 

2.2) Return {f,{ut, . . . ,Ui,hi)) . 

At each recursive stage of the algorithm we simply determine one in- 
decomposable right factor hi of /. We then proceed recursively to find a 

complete decomposition oi f <f> hi. As f has exponent u, and each inde- 
composable right factor has exponent at least one, there can be at most u 
recursive stages. We now analyse the number of field operations required 
to decompose a polynomial f & Ap oi degree n — . The worst case oc- 
curs when a p — linear (exponent one) right composition factor occurs at 
each recursive stage i, for 1 < i < v. In this case, at stage i we must call 
FindRightlndecFactors on a degree polynomial, requiring 0(Si?(p*)+p^*) 
field operations. Thus, the total number of field operations required to find 
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one complete decomposition is 

0<i<iv 

= 0(S^(n)+n^). 

Theorem 5.10. Given an additive polynomial f E Ap of degree n we can 
determine a complete decomposition of f in cAPDEC^ in 0{SF{n) + n^) 
field operations. 

Corollary 5.11. Rational indecomposahility of an additive polynomial of 
degree n can he determined in 0{Sp{n) + rr^) field operations. 

5.5 General Rational Decomposition of Additive Polynomials 

Let / e Ai;' be of degree n and let p — (r^, r^-i, . . . , ri) be an ordered 
factorisation of n. The fact that we can obtain a complete decomposition 
of an / G cAPDECf in a polynomial number of field operations in n does 
not mean that we can determine the existence of a decomposition of / in 
APDEC^, and find one if it exists, in polynomial time. We can look at the 
set of all complete decompositions and check if the composition factors of 
any of them can be "grouped" according to the desired ordered factorisation 
p. More generally, a length d ordered factorisation k = (sd, Sd-i, . . . , Si) of 
n G N is said to be a refinement of a length m < d ordered factorisation p = 
(^rrn • • • , '"i) if there exists a non-decreasing, onto map : {1, . . . , o?} ^ 
{1, . . . , m} such that for 1 < j < m, 

n Si=^i- 

l<i<£i 
<p(i)=3 

This is simply saying that the d-tuple k, can be divided into m contiguous 
pieces, with the elements of piece j having product rj, for 1 < j < m. One 
approach to finding decompositions of / with a given ordered factorisation is 
to generate the set of all complete decompositions of / and check if any of the 
ordered factorisations associated with these decompositions are a refinement 
of p. 

We now present an algorithm for generating all the complete decomposi- 
tions of an additive polynomial. 
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AllCompleteDecomposition: P{cAPDEC^) 

Input: - f E Ap , a monic additive polynomial. 
Output: - the set of all complete decompositions of / 
in cAPDECf. 

1) Using FindRightlndecFactors, find the set H of 
indecomposable right factors of /. Assume 

if = {hi,...,hi}. 

2) If f^hi 

Then / is indecomposable. Return (/,(/)). 
Else 

2.1) Let r:=0. 

2.2) For i from 1 to £ 

2.2.1) Let D^*^ :=CompleteDecomposition(/ ^ , 
the set of all complete decompositions 
of if^h,) in cAPDEC^. 

2.2.2) For each decomposition 

(/M„(M,,...,Mi))eD», 

add (/, {ue, ...,u,,hi))e cAPDEC^ 

to T. 

2.3) Return T. 

Correctness is easy to verify. At each recursive stage we simply find the set 
of all indecomposable right factors if of / and for each /i e if we recursively 
find the complete decompositions oi f ^ h. All complete decompositions are 
found and, since we choose a different member of if in each step 2.2.1, each 
decomposition added to T is distinct. 

We analyse the cost of the algorithm by first finding the cost of computing 
one complete decomposition. We then use the bounds developed in chapter 3 
and 4 on the number of complete decompositions to get bounds on the cost of 
computing all complete decompositions. As with CompleteDecomposition, 
the worst case occurs when a p — linear right composition factor occurs at 
each recursive stage i, for 1 < i < u. In this case, at stage i, we must call 
FindRightlndecFactors on a degree polynomial, requiring 0{Sf{p^)+P^^) 
field operations. Thus the total number of field operations required to find 
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one complete decomposition is 

0<i<i^ 

= 0(Sf(n) + n3). 

Theorem 5.12. If f G Ap is monic of degree n and t E N, then we can 
determine if there exist t decompositions of f in cAPDEC^ , and if so find 
them, with 0{t{SF{n) + n^)) field operations. 

By theorem 4.26, the total number of complete normal decompositions of 
/ in cAPDEC^ is rf'^^°^^\ so we can compute all complete rational decom- 
positions of an arbitrary additive polynomial in a quasi-polynomial number 
of field operations. 

Let p be a given ordered factorisation of n. As we generate each complete 
decomposition of /, we can check if the ordered factorisation associated with 
it is a refinement of p. The number of operations required to do this is dom- 
inated by the other steps in the algorithm. Thus, the number of operations 
required to find all decompositions of / in DEC^ is of the same order as the 
number required to generate all complete decompositions. 

Corollary 5.13. If f E Ap is monic of degree n, and p is an ordered fac- 
torisation of n, then all decompositions of f in APDEC^ can be found in 
j^o(iogn) ^gjj operations. 

Note that this algorithm requires a comparable number of operations to 
those of Kozen and Landau[1986] for separable irreducible polynomials. 

5.6 General Decomposition of Completely Reducible 

Additive Polynomials 

We now consider computing decompositions of a completely reducible addi- 
tive polynomial f E Ap of degree n corresponding to a given ordered factori- 
sation p of n. We will see that the decomposition problem for completely 
reducible additive polynomials can be computed in a polynomial number of 
field operations in the input degree. We proceed by constructing an inde- 
composable basis for / (see chapter 4, section D) and combine the basis 
components appropriately to determine if an appropriate decomposition ex- 
ists, and if so, find it. 
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We now describe an efficient way of computing an indecomposable basis 
for a given completely reducible additive polynomial. The procedure strongly 
resembles the one described in the proof of lemma 4.18. 

IndecBasis: Ap ^ Ap* 

Input: f & Ap , completely reducible of degree n — p". 
Output: Ui,U2.i ■ ■ ■ & Ap , an indecomposable basis for /. 

1) Using FindlndecRightFactors, find the set 

R = {vi,V2i ■ ■ ■ iVf} of indecomposable right factors of /. 

2) Let j := 0. 

3) Let c/(°) ■.= x. 

4) For i from 1 to £ do 

4.1) If ViH g^'-^^ = X then 

4.1.1) Let g^^ := g^'-^^VAVi. 

4.1.2) Let j ■= j + 1. 

4.1.3) Let Uj := Vi . 
Else 

4.1.4) Let := g^'~^\ 

4.2) If t/W = / then quit, 

returning ui,...,Uj as an indecomposable basis. 

Since we know / is completely reducible, / is, by definition, the join of its 
indecomposable right factors Vi, . . . ^v^- The algorithm simply looks at each 
indecomposable right factor in turn. At step 4.1, either ViVAg^'^~^^ = x or U 
= g^'^~^\ Only in the first case docs Vi contribute anything to the join 
of all the right factors, and, in this case, expn(5f'^*)) = expn(g(*^*~^)) +expn(t'i). 
The set of all such contributing right factors clearly forms an indecomposable 
basis for /. The cost of this algorithm is dominated by the cost of finding 
the set of indecomposable right factors of /. We have shown the following: 

Lemma 5.14. Let / G Ap he completely reducible of degree n. We can find 
an indecomposable basis for f with 0{Sp{ri) + n^) field operations. 

Let / e be completely reducible of degree n — p'^ and let p — 
{p^"", . . . be an ordered factorisation of n. We now address the prob- 
lem of finding a decomposition of / in APDEC^ . It is true in general that 
there exists a decomposition of / in APDEC^ if and only if there exists an 
ordered factorisation k = {p'^'^,p'^'^-^, . . . ,p'^^) of n which is a refinement of 
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p such that / has a complete decomposition in cAPDEC^ . Since all com- 
pletely reducible additive polynomials are completely transmutable, we need 
only determine if some permutation of the ordered factorisation k is a refine- 
ment of p. By theorem 4.20, the composition factors of an arbitrary complete 
decomposition and the members of an arbitrary indecomposable basis of / 
are similar in pairs. Assume Mi, . . . ,Ud forms an indecomposable basis for /, 
where deg Ui = for 1 < i < d. Then / has a decomposition in APDEC^ 
if an only if some permutation of /i — (p^'' , p^'^-^ , . . . ,p^^) is a refinement of 
p. This is equivalent to saying that some permutation of is a refinement 
of some permutation of p - we do not need to consider the order of p cither. 
In light of this, we denote an unordered factorisation of n of length m as 
[am, o,m-i, ■ ■ ■ ,ai] where G N for 1 < i < m, ni<i<m CLi = n and for any 
permutation r of {1 . . . m}, [a^-^, a^^_i, ...,0^-1] = [a„, a^_i, . . . , Oi]. Such a 
data structure can be easily managed computationally and the details will be 
left to the reader (for instance, one could manage them as sorted m tuples). 
Basic operations on an unordered factorisation of length such as assign- 
ment and equality test, will be assumed to require t'^^^^ field operations. Let 
p — . . . and jl — . . . be the unordered fac- 

torisations corresponding with p and respectively. A length d unordered 
factorisation 7 = [p'^'^ ^p'^''--^ , . . . is an unordered refinement of p if there 
is an onto map : {1, . . . , d} ^ {1, . . . m} such that for 1 < j < m, 

l<i<d 

Wc proceed by generating the set L of all length m unordered factorisations 
A of n which are unordered refinements of jl. For each A G L we keep exactly 
one refinement ipx from p, to X, ignoring other such refinements. We show 
that L is in fact small and can be computed in time polynomial in n. Once L 
is computed, it is easy to check if p is in L. If it is, then / has a decomposition 
in APDEC^ and it is a simple matter to recover this decomposition from 
the refinement. 

We proceed by dynamic programming. We define the d x m array S of 
sets of unordered factorisations as follows. For 1 < i < d and 1 < j < 

m, let Sij be the set of unordered factorisations of length j of p'^^ (where 
di = Yji<k<i^i) which are unordered refinements of . . . The 

following algorithm exploits an easy recurrence to generate all of S. 
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FindUnorderedFacts : N* x N (P(N*))* 

Input : - IJ' = {p^"^ , p^'^-^ , . . . jP*^^) , an ordered 
factorisation of n, 
- m e N, an integer at most d. 
Output: - S, a d X m array of sets of unordered 
factorisations of n as described above. 

1) Su 

For i from 2 to d 

For j from 1 to m 

2) 5y:=0. 

3) For each unordered factorisation 

\p''i-\...,p^^]eSi_,j_, 

add [p"^-S...,p"Sp^*] to Sij. 

4) For each unordered factorisation 

[p""^, . . . G Si-ij and for 1 <k <j 

add [p'^-', . . . . . . ,7/'^] to Sij . 

Certainly, at the conclusion Sdm contains the desired set of unordered 
factorisations. The number of unordered factorisations which are unordered 
refinements of p, is at most the number of additive partitions p(z/) of u (the 
exponents of p in the unordered factorisation give a partition of i/). Hua[1982] 
(theorem 6.1) shows that 

p{iy) < 

Thus the total algorithm can be completed in 

dmi''^^^^2^'^^°^'^ — j/0(i)26Vf^iogi' 

field operations. By keeping the products p°-i^p^* in step 4 in an "unevaluated" 
form (or, alternatively, keeping some record of the multiplicands) for each 
A e I/, we can easily recover an explicit unordered refinement ijjx from p to A. 
By checking if p is in Sdm, we can determine if jl is an unordered refinement 
of p, and, if it is, actually determine the refinement ijj. 
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Assume p G Sdm and ip is an unordered refinement from n to p. For 
1 < j < m, let 

hj = □ Ui. 

l<i<d 
¥>(i)=j 

Then for 1 < i < m, deg hi — ri, hi,h2, ■ ■ ■ ,hm are pairwise composition 
coprime, and hiU ■ ■ ■ L\ hm = f ■ The foUowing simple procedure can be used 
to recover a decomposition of / in APDEC^. 

BasisToDec: Ap* APDECf 

Input : -hi, ... , h„i G kp such that / = /ii U /i2 U • • • U hm , 
hi r\ hj = X for 1 < i < j < m 
and deg/ij = for 1 < i < m . 
Output : - (/, iU fm-u ...Ji))e APDEC^ 

where p = (r^, r^_i, . . . , n) . 
Let := x. 
For 1 < i < m 

Let grW := g^'-^^ U /ij . 
Let fi := ^« ^ g^'-^^ . 
Return (/, (/^, . . . , /i)) G APDEC^ . 

This procedure can certainly be completed in O(n^) field operations. We 
have now completed the description of a general decomposition algorithm 
for completely reducible additive polynomials and have shown the following 
theorem: 

Theorem 5.15. Given f & kp completely reducible of degree n and p an 
ordered factorisation of n, we can determine if f lias a decomposition in 
APDEC^, and if so find one, in 0{Sp{n) + n^) field operations. 

5.7 Determining Transmutations of Additive Polynomials 

Another approach to finding decompositions of additive polynomials is to 
find one complete decomposition and then, using the relationship between 
decompositions (developed in chapter 4), produce a decomposition into fac- 
tors of the desired degrees. 

To do this we must be able to determine if two polynomials f,g & Ap are 
transmutable, and find the set 

{{gj) eApXAp\fr^f, f = g> f,g = f>g}, 
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of possible transmutations of / by g. The following algorithm performs this 
task if / is indecomposable in a polynomial number of operations in the sum 
of the degrees of / and g. 

Transmutable: Ap x Ap ^ P{Af x A^) 

Input: - f & Ap , monic and indecomposable, g & Ap , monic. 

Output : - T = {{g, f) e Ap X Ap \ f ^ f, f = g > f,g = f > g} . 

1) Using FindlndecRightFactors , find the set H C. Ap of 
indecomposable right factors of fog. 

2) Let J := {f e H \ expn/ = expn/} C H. 

3) Let T:=0. 

4) For each / G J 

4.1) Let g:= (f o g) ^ f . 

4.2) If g = f>g then let T :=TU{g,h). 

5) Return T. 

A transmutation oi f hy g will transform / into a similar polynomial 
f ^ Ap which is a right factor oi f og. Therefore, we eliminate all the f ^ H 
with exponents unequal to that of / in step 2. Now, for any g, f e Ap such 
that f o g — g o f and g — f > g, we know 

f°9={f>9)°f 

= {{gVAf)^g)og 
^ {9> f) o 9- 

It follows that f = g > f, and since / and / have the same exponent, g and 
/ are composition coprime and / transmutes by g. 

Theorem 5.16. The set of all transmutations of an indecomposable additive 
polynomial f E Ap by an arbitrary additive polynomial g G Ap, where the 
degree of f o g is n — ]f , can be computed in 0{Sp{ri) + n^) field operations. 

Proof. Determining the set of indecomposable right factors in step 1 requires 
0{Sp{p'^)+p^'^) = 0{Sp{ri)+n^). Step 4.1 require 0{ri) exponent u divisions, 
and 0{ni'^ logp) field operations. Finally, step 4.2 requires Oi^nu^ logp) field 
operations. Thus the total number of field operations required is dominated 
by the number required for step 1 and is 0{Sp{n) + n^). □ 
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Suppose G in the above algorithm is given as a complete decompo- 
sition. Then, if / transmute hy g, f = g > f where f E Ap and f ^ f- It 
follows that f ° g — g o f where g — f> g. We would like to give the corre- 
sponding decomposition of g. By theorem 4.13 we can compute the effect of 
transformation of a composition. The following algorithm performs this task 
efficiently. 

Transf ormComposition: Ap x cAPDEC^ cAPDEC^ 
Input: - h E Ap , monic aind indecomposable, 

- {g, {9m, 9m-i, gi)) e cAPDEC^ . 

Output : - {g,{gm, 9m-i, ■ ■ ■ , ^i)) e cAPDEC^ where 

g ^ h>g and giE Ap, g^ ^ g^ for 1 <i <m. 

hi := h. 

9i ■= hi\>gi. 

For 2 <i < m 

hi := {gi-i o gi_2 o---ogi)t>h. 

gi hi>gi. 
Return {h > g, gm-u ■ ■ ■ , ^i)) • 

Correctness follows immediately as the algorithm is simply a direct appli- 
cation of theorem 4.13. U g E Ap and h G are of exponents p and a 
respectively and 6 = max(p, cr), then computing hi G Ap in the algorithm 
requires 0{S^\ogp) field operations for each i with 1 < i < m. Computing 
gi also requires 0(5^ log p) field operations for each i with 1 < i < m. We 
know that m < 5, so we get the following theorem: 

Theorem 5.17. If {g, {gm^gm-i: ■ ■ ■ ^gi)) £ cAPDEC^ where g e Ap has 

exponent p, and h G A^ has exponent a, then we can transform the decom- 
position of g into a corresponding decomposition of h\> g in 0(5^ log p) field 
operations, where S = p + a. 

5.8 Bidecomposition of Similarity Free Additive Polynomials 

We now describe an algorithm for finding a bidecomposition of a similarity 
free additive polynomial / G A^? of degree n = corresponding to an ordered 
factorisation p = {p^tP"^)- We will see this can be done in a polynomial 
number of field operations in the degree of the input polynomial. Using the 
algorithm CompleteDecomposition, we can find a complete decomposition 
(/, (/m, /m-i, •••,/!))£ cAPDEC^ with 0{Sp{n)+n^) field operations. We 
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proceed by looking at each subset S* C {1, . . . , m} such that J2ies expn fi = o. 
Assume S has cardinahty t G N where t > 1. For each S we determine if 
there exists a decomposition (/, {g^ni ■ ■ ■ , gi)) € cAPDEC^ and a bijection (/? 
between {1, . . . , and S with gi ~ f^p(i) for 1 < i <t. Say a decomposition 
with this property is consistent with S and (/, /m-i, . . . , /i)). In other 
words, there is a decomposition such that the rightmost t composition factors 
are similar in pairs to the composition factors indexed by S. Because we are 
assuming / is similarity free, all transmutations are unique (see chapter 4, 
section E). 

In the following algorithm wc determine if a decomposition consistent 
with a given S of size t and (/, (/,„(, fm-i, • • • , /i)) G cAPDEC^ exists. The 
algorithm proceeds in stages for 1 < £ < t. Assume (Z^-*, /i^li, ■ ■ ■ , /i^"*) — 
{fm, fm-i, ■ ■ ■ , fi)- At each stage i we transmute one of the factors of 
(/, {fjn~^\ fm-i\ • • • ) /i^"^'')) which is similar to a factor indexed in S into 
the the composition factor position from the right, obtaining a new de- 
composition (/, (/^f , frn-ii • • • ! fi ^))- We keep track of where the factors of 
the original decomposition have been transmuted to at the end of stage £ 
by means of an index vector c^^^ = (c^-*, . . . , "*). At this point, jj^^ ~ / (t) 

for each j such that I < j < m. The decomposition produced at the end 
of stage i will have the property that for each j G N such that 1 < j < i, 
cf^ G -S". If at each stage such a decomposition can be found, at stage t we 
will have a decomposition of / consistent with S and (/, {fm, fm-i, ■ ■ ■ , /i))- 

FactorsToRight : cAPDEC^ x P(n) cAPDEC^ 
Input : - (/, fm-i,..., fi)) e cAPDEC^ , 

- S (in of cardinality t G N. 
Output : - (/, [gm, gm-i, gi)) e cAPDEC^ consistent 
with (/, (/m,/m-i, ■ • • ,/i)) and S (if such a 
decomposition exists) . 

1) Let c(o):=(cW,cSLi,...,cf)):=(m,m-l,...,l). 

2) Let S^^^ -.^S. 

3) For £ from 1 to t 
3.1) For each i G S^^"^) 

3.1.1) Let A; G N be such that c^l'^^=i. 

3.1.2) Using Transmutable , determine if f^. 
transmutes by f'i_i^ ° ' " ° ff ■ 
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If so, goto step 3.3. 

3.2) No transmutation found, quit. 

3.3) Using Transf ormComposition, for i<j<k 
find /f ~ such that 

(ie. compute the transmutation of fjf by 

3.4) L^t' :-{ft^,---jlf^\ft^,---Jr\ 

Ae-i) Af.-i) M-i}\ 

J k ) Jt-1 ■■■■■> Jl ) • 

3 5) Let — fr(^-i) r^^"^^ r^^"^^ r^^^^^ 



3.6) Let 5W := 5(^-1) -{^}. 
4) Return (/,(/«, /f^)) • 



We now show the correctness of the above algorithm. If there exists 
no decomposition of / consistent with {f,{fm,fm-i,---,fi)) and S, then 
FactorsToRight will obviously not find it. 

Lemma 5.18. Let S be a subset of {1, . . . m}. If there exists a decomposi- 
tion of f consistent with (/, {f^n, fm-i, ■ ■ ■ , /i)) and 5", FactorsToRight will 
find one. 

Proof. We prove this lemma by induction on t, the cardinality of S. For 
the basis step, t = 1 and 5* = {i} for some i such that 1 < i < m. Assume 
that (/, (gm, Qm-i, ■ ■ ■ 1 gi)) e cAPDEC^ is a decomposition of / consistent 
with (/, (/m, /m-i, ■ ■ ■ , /i)) and S. In step 3.1.1, k — i. We know that 
gi (|) /. Let j e N be the smallest number such that gi (|) o • • • o f[°\ The 
polynomials gi and fj-i°- ■ ■°fi'^ are composition-coprime, so by theorem 4.7, 

= Uf-i o ■ ■ ■ o /i°Vfi'i> fT ~ 9i, and jf^ transmutes by jf_\ o ■ ■ ■ o /{°\ 
Since / is assumed to be similarity free, j = k and the transmutation of step 
3.1 gives a decomposition consistent with (/, (/^, fm-i, • • • , /i)) and S. 

Now assume that FactorsToRight finds a decomposition of / consistent 
with (/, (fm, fm-i: ■ ■ ■ : /i)) and 5" if the cardinality of S is less than t. We 
must show it does so for 5" of cardinality t as well. 

Assume S has cardinality t and that (/, {gm, gm-i, ■ ■ ■ , di)) ^ cAPDEC^ 
is a decomposition of / consistent with (/, (/^, /^-i, • ■ ■ , /i)) and S. With 
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£ = 1 we know there exists a k G S such that f^^gi and by the argument 
for the basis case, fjf^ = {fjf^i o ■ ■ ■ o f[^^) > gi and fjf^ transmutes by fjf^i o 
• • • o f^^^ . The algorithm may or may not transmute /^°^ to the right of the 
decomposition, depending on the choice in step 3.1. Assuming we do choose 
this f^^ to transmute in step 3.1, we get 

(fW f(l)\_/f(0) AO) m 7(0) 7^(0)^ 

Urn T ■ ■ ■ ■> J 1 ) \Jm 5 • • • ) ^ fc+1 ' ^ ' • • • ' J 1 ^Jk J 

_ (r(0) AO) AO) AO) . 

— KJm ) • • • ) Jk+1-' Jk-li ■ ■ ■ 1 Jl ) yiy' 

where ff^'' ~ /i for 1 < i < /c (we know f^'' = gi because / is similarity 
free). As gi is never referenced in the computation again, the remainder 
of the algorithm is essentially finding a decomposition oi f gi (which has 
decomposition {f </> gi, (/„•*, • • • , /2^'')) ^ cAPDEC^ ) that is consistent with 
{fm^i fm-ii ■ ■ ■ 1 fi^^) S — {i}. Since S — {i} has cardinality less than t, 
FactorsToRight finds such a decomposition by the inductive hypothesis. 

Suppose, however, that in step 3.1, with £ = 1, we transmute fj^^ ^ gi, for 
some w such that 1 < w < m, w & S and w ^ k, to the right. Then /n, ~ gj 
for some j < t. Since we know f^^ if /, gj transmutes by gj^i o ■ ■ ■ o g^. 
Assume 

Qj o {gj-i o • • • o s'l) = Qj-i o---ogiogj 

where g',; ~ for 1 < ^; < j. Then 

(/, {9m, gm-1, gj+i,gj-i, gi,g,i)) e cAPDEC^ 

must be another decomposition of / consistent with (/, (/,„, fm-i, .... /i)) 
and S. Since / is similarity free, gj = By the argument for the case 

when fl^'' was chosen in step 3.1, FactorsToRight finds a decomposition 
consistent with (/, (/^, . . . , /i)) and 5". □ 

In FactorsToRight we execute t < i/ iterations of the main loop in step 
3. In iteration i for 1 <i <t, step 3.1 will require up to i transmutations of 
additive polynomials of exponents at most u—i. This requires 0(i(Sj7(p'^~*) + 
p^*)) field operations. Transforming the factors of this transmutation in step 
3.3 using Transf ormComposition requires 0((t/ — iyiogp) field operations. 
The total number of field operations required in iteration i is 

OiiSpip"-') + ip^' + if logp) 
= 0{iSf{p''-')+ip^'). 
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The number of field operations required for all t = O(logn) iterations is 
therefore 

0<i<t 

— 0{Sp{n) log n + log n) . 

We can now write a complete algorithm for the bidecomposition of similarity 
free additive polynomials. 

SimFreeBidecomp: Ap x ^ cAPDEC^ 

Input: - f E Ap , similarity free of degree n—p^. 
Output: - {p^iP'^), an ordered factorisation of n. 

1) Using CompleteDecomposition, attempt to find a 
decomposition (/, (/^, /^.i, . . . , /i)) e cAPDEC^ . 

2) For each subset S of {!,..., m} 

2.1) if Z]ie5^^P'^/i = find a decomposition 
{f,{9m,gm-i,- ■ ■ ,gi)) consistent with 
(/, ifm, fm-1, • • • , /i)) and S using FactorsToRight . 
If such a decomposition is found, goto step 4. 

3) There is no decomposition of / in cAPDEC^p , quit. 

4) Let k be such that Qm o Qm-i ° ■ • ■ ° Qk has 
exponent p. 

5) Return (/, {{g^ o g^-i o • • • o gi^), {gk_^ o gk_2 • • • o 9i))) ■ 

There are at most 2'' = 0{n) subset ^S" of {1, ... , m} so the total number 
of field operations required is 

0(Si?(n)nlogn + n'^ logn). 

We have shown the following theorem: 

Theorem 5.19. Let f ^ Ap he similarity free of degree n = p^ . Let {pP,p^) 
be an ordered factorisation of n. Using SimFreeBidecomp we can determine 
if there exists a decomposition of f in APDEC^p^a^, and if so find one, witli 
0{Sp{n)n log n + n'^ log n) field operations. 
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5.9 Absolute Decompositions of Additive Polynomials 

As noted in chapter 3, additive polynomials decompose into p-linear factors 
over their splitting fields. We will now show how to compute an arbitrary 
decomposition of an additive polynomial f & F[x] in an algebraic closure F 
of F (an absolute, complete decomposition). 

Let / G have exponent u, splitting field K (1 F and kernel V. We 
know any p-linear right factor h = — ax where a & K oi f has a one 
dimensional kernel W which is a subspace of V. For any root a 7^ of /i, 
a — a'P~^. It follows that the only possible p-linear right composition factors 
of / have {p — 1)*^* powers of roots of f /x in K as the coefficients of their 
constant terms. Therefore {x^ — ax) ^ f ii and only if a G -ftT is a root of 
if /^) ° x^^^^~^\ Assume Fi is a field (to be defined later) for 1 < i < u and 
that F = F,C C F,_2 C ■ ■ ■ C Fi c F. 

AbsAPDecomp: A^ cAPDEC^ 

Input : - G Ai^. monic of exponent i, 

for some i G N. 
Output : - a complete decomposition of / in cAPDEC^ . 
If i = 1 

then return /(^) G Fi[x]. 
Otherwise 

1) factor /iW = (/W/x) ox^ G F[x] 
such that 0^ = ■ ■ ■ M^;^ 

where Uj G F[x] are distinct, monic and 
irreducible eind G N \ {0} for 1 < j < m. 

2) Let a — z mod Ui G Fi_i = Fi[z]/ {ui) . 

3) Compute = ^ {xP - ax) G Fi_i[x] . 

4) Recursively compute an absolute decomposition 
{g''^\ {vm,Vm-i, ■ ■ ■ ,V2)) G cAPDEC^ using AbsAPDecomp. 

5) Return {f^^ ,{v^,Vm-i, . . . .v^.u^)) e cAPDEC! . 

Each recursive stage i (starting with stage v) requires the factoring of a 
polynomial of degree at most (p* — l)/(p — 1) < in Fj. The degree of Fj_i 
over Fj is at most (p* — l)/(p — 1) < p*. It follows that the degree of Fj over 
F = F,^ is at most 

n [^.-1 ■■ < n 

i<j<i/ i<j<v 
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Therefore, at recursive stage i, the number of field operations required is at 
most 

and the total cost is 

0<i<u 

We have shown the following: 

Theorem 5.20. Given f E Ap monic of degree n — p", we can Gnd an 

absolute decomposition of f in cAPDEC^ in 0(M(p'' )Sf(p'^)) = n°(^°sn) 
Geld operations over F provided F supports a polynomial time factoring 
algorithm. 

Suppose F is finite. It is conjectured that an additive polynomial f E 
of degree n — p^ can have a splitting field K of degree at most n'^^^^ over 
F, and quite possibly at most n. This would follow immediately from a 
(much stronger) unproven conjecture of Ore [1933b] that the degrees of all 
irreducible factors of / divide the degree t of the largest multiplicative factor 
of /. This would imply that [K : F] = t, and that the above algorithm 
for absolute decomposition would run in a polynomial number (in n) of field 
operations over F. 
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6 Rational Function Decomposition 

Let / G F{x) be a rational function in x. A natural question to ask is if / can 
be represented as a composition of two other rational function g,h & F{x), 
so that f = g o h. This problem has polynomial decomposition as a small 
subcase. Mathematically, rational function decomposition has been exam- 
ined since Ritt[1923]. The Generalised Schur Problem for rational functions 
involves the classification of so called "virtually one to one" rational functions 
and their decompositions. In general, rational function decomposition is far 
from completely understood. An in depth coverage and survey of the prob- 
lem is presented in Pried[1974], where a generalisation of the tame case for 
polynomial decomposition in perfect fields is described (and is well beyond 
the scope of this thesis). In this chapter we present a definition of the ratio- 
nal function decomposition problem in a form similar to our presentation of 
the polynomial decomposition problem. We show that such decompositions 
can be normalised in a manner similar to polynomial decomposition and that 
the general problem is Cook reducible to the normal problem. We then give 
a computational solution to the normal decomposition problem for rational 
functions (which will require an exponential number of field operations in 
the input degree and a factorisation algorithm over F). 

6.1 The Normalised Decomposition Problem 

If / e F{x) then / = fN/fo for some JntId G F[x] of degrees and n^, 
respectively. We can assume that /jv and are relatively prime and that 
is monic. For any rational function /, there is a unique pair of polynomials 
/iv, /d e F[x] with fr, monic and gcd(/;v, fo) = 1 such that / = Jn/ fo- With 
this in mind, define 

W = {(/, Um, fo)) e F{x) X F[x]^ I / = U/U, gcd(/^, U) = 1, U monic}. 

If (/i (/jv) fo)) £ Ui? and /jv is monic, we say / is monic. Also define deg/ = 
ripf + rio and A(/) = rit^ — riu- The only automorphisms of the field F{x) 
over F are the fractional linear transformations 



tiX + t2 

x ^ , 

t^X + t4 
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where ti, t2, ts, ^ F and tit4 — ^2^3 7^ 0. The inverse of the the above map 
is 

/ 1 \ Ux-t2 

\t1t4-t2t3J -t^x + ti 

Note that this group is isomorphic to GL2{F), the group of 2 x 2 non-singular 
matrices over F. Note also that if / = Jn/ fo G F{x), then 

hX + t2 J. tl/jv + ^2/0 

° / — ■ 

t3X + t4 hft, + Ufo 

Let f,g,he F(x) with f — g oh, and let t e F{x) be a fractional linear 
transformation. We see that / = {g o fr^) o (t o h) is also a decomposition 
of /. Two decomposition f = g o h and f = g' o h' are said to be linearly 
equivalent if there exists a fractional linear transformation t G F{x) such that 
g = g' o t~^ and h^toh'. Let (/, {f^, fo)) e Up and (r^,ro, Sat, Sd) G N^. 
Define 



f (/, Z')) G F{x) X F(a;)^ / = o /i, 

deg^f^v = rjv, deg^fc = r^, 
deg/ijv = Sjv, deg/io = s^. 



For any / G F(a;) and (r^v, r^,, s^r, s^,) G N*^ there are potentially a large 
(possibly infinite, depending upon F) number of decompositions of / in 
RATDEC^^^^^^ g^ g^-^ (though up to linear equivalence we will see there are 
at most a linearly exponential number) . The rational function decomposition 
problem is, given / G F{x) and r^, r^,, Sjv, G N, to determine if there exist 
any decompositions of / in RATDEC^^ and, if so, to find one or 

all of them up to linear equivalence. 

Let (/, (/jv, fo)), {g, {gN: go)), {h, {h^, hn)) G Up. Assume fo, gn, go, /iiv, ho G 
F[x\ have degrees nN,no,rj^,ro, Sj^, So respectively, and that they are of the 
form 



u = 




fo 






0<i<njv 




0<i<no 


9n = 




9d 






0<i<rN 




0<i<ro 


flN = 




ho 






0<i<sjv 




0<i<SD 
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Let 



B = 

li f — g oh then 



0<i<rjv 
0<j<rD 



hJ«{g^oh)eF[xl 
hJ''{guoh)eF[x\. 



f = 



Ahj, 



BK 



Ah''"'"''' 



B 



if rjv > Td 

if Tn < Tu 



Note that 



degA 



Ti^Sjsi if S]^ > Sjy, 
I^N^D if ^D- 



li — So then cancellation can occur and the strongest statement that can 
be made is that degA < r^s^. Similarly, 



^D"Sjv if SjV ^ ^Di 
'^D^D if "Sat ^ Sq. 



Once again, if = 
that deg5 < ToSjy. 



degB ■ 

Su, cancellation can occur, and the most we can say is 



Lemma 6.1. A,B, and hu (as defined above) are pairwise relatively prime. 

Proof. We first show gcd(A, B) — 1. Suppose to the contrary that gcd(A, B) ^ 
1. Then A and B have a common root /3 e F (where F is an algebraic closure 
of F), and 



m 



K,h/^{P) if/i,(/3) = 0, 

hruh/^iP) if/l,(^)=0. 



If hi^{P) 7^ 0, it follows that g^ihlP)) = gr,{h{P)) = 0, a contradiction since 
g^ and g^ are relatively prime. If ho{(3) = 0, then A{(3) = hr^^htq'^^ {(5) ^ 
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(since gcd{h,^, hr,) = 1), contrary to the assumptions. Thus gcd{A,B) = 1. 
We now show that A and /i^ are relatively prime. First, 

gcd(A/i^)= gcd( Yl hhJhJ^-\K) 

0<i<rN 

0<i<rjv 

— 1 since gcd(/i^, ha) — 1. 



Similarly, 



gcd(S,/i,)= gcd( E hhJK^'-'^K) 

0<j<rD 

= gcd(6,.^/ljv'''', ^d) 

= 1 since gcd(/i^,/io) = 1. 



□ 



This implies that / = {A/B)hJ° "^^ is in "lowest terms". For / as above, 
we call {nffjTio) the degree pair of /. 

Lemma 6.2. Given {f,(fNjD)),{9,{9N,9D)),{h,{hr,,ho)) G Up with re- 
spective degree pairs {nj^,na), ij-i^^Tj^), and {sn,So), where A(/), A(/i) > 
and f — g o h, it follows that A(gf) > 0, rjv = tIn/sn and 

Sn\Sn So) 



Proof. We know that / = {A/ B)hJ°~'^^ , where A, B e F[x] are as defined 
previously. Assume < Vo- We have seen that {f ,{AhJ°~'^'^ , B)) e 
and rii^ — r^SM + rDSo — TjvSo > r^s^v — n^. A simple rearrangement reveals 
that rjv(sjv — So) > ^^.(s^r — s^) and since s^ > s^, we find that > r^,, a 
contradiction. It must then be true that r^v > To and (/, {A, Bha^^~'^'^)) G 
Up. From the previous discussion on the degrees of A and B, we know that 
nN = ^nSn and = t^Sn + ^^(r^v — Td)- Solving for and in these 
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equations, we derive that = n^/spf and 

foi^N So) — TT'D Sd^at 

and finally that 

□ 

This implies that the degree pair of g is totally determined by the degree 
pairs of / and h. We will later see that in fact / and h uniquely determine 

g- 

The set of degree pairs of / and it images under fractional linear trans- 
formations forms a highly structured set. 

Lemma 6.3. Let f e F{x) \ F, 

T — {to f\t e F{x) a fractional linear transformation} 

and 

D = {{c, d) E n'^ \ (c, d) a degree pair of some g G T}. 

Then D has exactly three elements, and these are of the form {a,b), {b,a) 
and (a, a), for some a, 6 G N with a > b. 

Proof. Assume (/, (/^r, /o)) G Up and / has degree pair {nf^,n]j). As noted 
earlier, if t = {tiX + t2) / (tsx + t4) G F{x) is a fractional linear transformation 
then to f — (tifN + ^2/0) / {tsfff + tifo)- We examine three cases. If > no, 
then for any fractional linear transformation t G F{x), observation reveals 
that to f has possible degree pairs (rijv, n^), {jio-i tIn) and (n^v, Un). Similarly, 
if rio > Hjv, to f has possible degree pairs (n^v, n^,), (n^,, n^v) and (n^, n^). If 
fN = fD, let be the leading coefficient of fj^ and 6 the degree of fff — a^^fo- 
Then t o f can have degree pairs (njv,'n.;v), (5, ''T'jv), and (njv,5). Since the 
fractional linear transformations form a group under composition, these are 
the only degree pairs. □ 

This allows us to normalise the rational function decomposition problem 
and show a reduction from the general problem to the normal problem. For 
any (/, (/Ar,/o)) G Uj?, let a^v G F be the leading coefficient of and let 
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7 G F be the leading coefficient of /jv — a-Nfo- Also, let a = 
Define Aj-, a fractional linear transformation, as follows: 



1 e F. 



X — a 

7 , 

, Ojn / ^ 



if A(/) > 0, 
if A(/) = 0, 
if A(/)<0. 



A J is a fractional linear transformation. Observation reveals that A/ o / is 
monic and A(Aj o /) > 0. li f — g o h ior g,h e F{x), then 

Afof^{AfOgo A^^) o (Aft o h). 

Therefore, we can assume for any decomposition of / that / and h are monic 
and A(/) and A(/i) are both positive. By lemma 6.2 we know A{g) is positive 



as well. Because = Z^o<j<rjv ^i^Nh^ 

and g is 

made by noting that 



rjv- 



Sn > Sd, and is monic, we 



also see that 6,^^ = 1 and g is monic as well. A further normalisation can be 



f ^ goh 
= g{x + h{0))o{h-h{0)). 

Assume A{h) is positive. Then h — h{0) = {hj^ — h{0)hiy)/hj^ has the same 
degree pair as h. If A(/) and A{g) are also positive, it follows that g{x+h{0)) 
has the same degree pair as as well since and r^, are completely deter- 
mined by n^jrio, s^, and s^,, so we can assume h{0) = in any decomposi- 
tion. We call a decomposition of a monic rational function / with A(/) > 
into two monic rational function g,h E F{x) such that A.{g) > 0, A(/i) > 
and /i(0) = a normal decomposition of /. Let nff,no,r;^,ro, s^f, So G N be 
such that = r^Sjv and = r^So — roSo + '"zjS^. Define 

U\{g,h:))eF{x)xF{xf: 

/, g, h monic, h{Q) = 0, f = g o h, 
(/, (/iv, /d)), {g, {9n, 9d)), {h, {h^, ho)) e Up, 
A{f),A{g),A{h)>0, 
dcgg^ = r^v, dcggo = r^, 
deg/ijv = S;v, deg/io = s^. 



— < 
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Given a monic / G F{x) with A(/) > 0, and {r^jTo, Sm, So) G N'' such 
that = fffSp, and n^, = rjvS^, — r^So + r^iS^v, the normalised rational 
function decomposition problem is to determine if there exists (/, {g, h)) E 
NRATDEC^^^ j.^^g^^g^^ and if so to find some predetermined number of 
them. 

Note that unhke the polynomial decomposition problem, the degrees of 
the numerators and denominators of /, g and h are not left constant by the 
normalisations. We will now examine the relationship between the normal 
problem and the general problem by showing a linear time (in the input 
degree) reduction from the general problem to the normal problem. 

Assume / G F{x) and rj^,riy, Sj^, s^) G N are given as in the general 
problem. Also assume (/, (/^v, fo)) e and / = A/o/ has (/, {U, Jo)) G Hp 
and degree pair {fif^^no)- The easiest case occurs when Sjv > s^. For each 
decomposition (/, [g, h)) G RATDECf^^^^^^ g^ g^^ there is a decomposition 
(/, {g,h)) G NRATDEC^^,i,^^g^ g^^, where f^v and are determined as in 
lemma 6.2. Conversely, from any {f,{g,h)) G NRATDEC^^^ we 
can find a decomposition (/, (Aj^ o g^ h)) G RATDEC^^^ ^.^ 

If Sjv < s^, we have another easy case since Ahoh has degree pair (sj,, s^f). 
For each decomposition (/, {g, h)) G RATDEC^^ there is a decom- 

position 

(/, ig,h)) G NRATDECf,^^,^^,^^,^) 

where once again, we compute f^, fo as in lemma 6.2. From any (/, {g, h)) G 
NRATDEC^^^^^^ ,,^ ,,^-^ we can find a decomposition (/, (A^ ^o^o(l/a;), (l/a;)o 
h)) G RATDEct °l , y 

Finally, if — So, we have a difficulty in that the problem can be 
normalised in a number of different ways. Let So G N with So < and 
find f^,fo G N as in lemma 6.2 (if such an integer solution exists). For 
each decomposition {f,{g,h)) G RATDEC^^^ ^^-^ there is a decompo- 
sition (A/ o /, (A/ o g^h)) G NRATDEC^^^,^^^,^^^^^^) for some appropri- 
ately calculated r^'^ro G N (as in lemma 6.2). By lemma 6.3 there ex- 
ists a fractional linear transformation t G F{x) such that A{t o h) > 
and t o h is monic and has degree pair {sn,So) for some < Sjv. Thus 
(A/o/, {Afogot-\toh)) G NRATDECf,^^,^^^^-^^^ for appropriately deter- 
mined ff^,fo G N. For any (/, {g, h)) G NRATDECjj^^^^^^g^^^^^ we can find a 
decomposition (/, (A/o^o[l/(a;-l)], [{x+l)/x]oh)) e RATDEC(,^^,^^^^^^^^ 
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(the fractional linear transformation t = {x + l)/x [whose inverse is l/{x — l)] 
is such that t oh has degree pair 3^,8;^). This requires the solution of at 
most < deg / normal problems. We have shown the following: 

Theorem 6.4. Assume we have an algorithm such that, given a monic f e 

F{x) of degree n with A(/) > 0, and (fjv, f^, Sjv, s^,) e N^, we can determine 
if there exist any (/, {g,h)) G NRATDEC^^^j.^^^^^^^-^, and if so, find some 
predetermined number of them, in 0{T{n)) field operations. Then, given 
f e F{x) of degree n and (r^v, foi Sn, So) £ N^, we can determine if there exist 
any (/, {g, h)) e RAT DEC ^^^^ and if so, find some predetermined 

number of them, in 0{si^T{n)) — 0{nT{n)) field operations. 

This is equivalent to saying that the general rational function decomposi- 
tion problem is Cook reducible to the normal rational function decomposition 
problem, where the oracle for the normal problem is consulted times. 

6.2 Decomposing Normalised Rational Functions 

In this section we present a general computational solution for the rational 
function decomposition problem. Throughout this section, for any f E F[x] 

of degree n and any i G N such that < i < n, we let coeff (/, i) £ F be the 
coefficient of in /. We begin by showing a preliminary lemma. 

Lemma 6.5. Given r G N, u G F[x] monic of degree n, and h G F{x) monic 
with h{0) = 0, {h, (/ijv, ho)) G Up stnd A(/i) > 0, we can determine if there 
exists a monic v G F[x] of degree r such that u — v{h)hr,'^ in 0{n log nM{n)) 
field operations. 

Proof. Assume h^, ho have deg ree Sj^, Sjj respectively. It follows that if v 
exists, and is of the form 

0<i<r 

with fej G F for < i < r then 



0<i<r 
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Let d = max{j : \ h^} > I- We see that for £ e N, 
coeS{u,£d) = coeff( ^ bihi^''hj~\£d) 

0<i<r 

= coeff( Yl hihJhJ'~\M) 

o<i<e 

^ becoeS{hr„dY coeS{ho,Oy-^ + coeS{ ^ hihJhJ'~\U). 

o<i<e 

Since coeff(/ijv, rf) 7^ and coeff(/iD, 0) 7^ 0, we know 

coefr(ii, £d) - coefr(Eo<j<^ bihjho'"', id) 
^ ^ coeff(/i^,d)^coeff(/io,0)'-^ ' 

Using this recurrence we can compute the coefficients bo,bi,. . . ,br G F in 
order. Because the system is over constrained, the computed coefficients 
may not lead to a decomposition. Thus we must check if in fact u — v{g)ho^ ■ 
The cost of this computation is dominated by the cost of computing /ijv'^d^"* 
for < i < r, which can be done with 0{n\ognM{n)) field operations over 
F. □ 

The previous lemma allows us to perform "right division" in the ring of 
normal rational functions under composition. 



Lemma 6.6. Given f,h e F{x) monic with h{0) = and A(/), A(/?.) > 0, 
we can determine if there exists a monic g G F{x) (with A{g) > 0) such that 
f = g o h, and if so compute it, with 0{nlognM{n)) field operations. 

Proof. Assume (/, (/jv, /d)), (h, (/ijv, ho)) G Up. We want to find {g, {g^,, gf,)) G 
Up such that f — g o h. We know = {gn o h)ho^'^ and using lemma 6.5 
we can compute g,^ G F[x] if it exists. We also know that fo/ho^^"^'^ = 
go{h)hj^^^ , and so we can compute (jf^ G F[x] if it exists. The total number 
of field operations required is 0{n\ognM{n)). □ 

We can now give an algorithm for the normal rational function decompo- 
sition problem. It will require an exponential number of field operations. 
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NormRatDec: F{x) x -> ^{RATDEC^) 
Input : - / e F{x) with A(/) > and 

(/, Un, fo)) e where and fu have 
degrees and n^, respectively, 

- Tjv, To, Sjv, So e N such that riN — rNSN 
and = r.^.s^ - ToSb + r^Siv • 
Output: - the set of all decompositions of / 
in RAT DECK ^ . . )■ 

1) Let T:=0. 

2) For each monic h^, G F[x] of degree So such that 

and h^iO)^0, do 

2.1) Let 5 ■= f^/hj''-'^ . 

2.2) Let 6o :=/o(0)/(/io(0))'-'v. 

2.3) For each factor hf^ of B — hQhj/° of degree s^v, 

2.3.1) Let h:= hj,/ho. 

2.3.2) Attempt to compute g E F{x) such that 
f = goh using lemma 6.6. If 

such a g exists for the chosen h, 
add {f,{g,h)) to T. 

3) Return T. 

We know that in any decomposition ho^^~^°\fD: so in step 2 wc generate 
all potential candidates for ho- In step 2.2, since /d(0) = ho^^^''^[{}i)hohr>^°{Q) 
boho^'^ , we can compute bo = fo{S^)/hJ'^{Q). We use the identity 



UjlUN I I'D 



to get all candidates for h^, namely all degree factors of i? — bQho^° ■ 
In step 2.3.1 we simply check whether the chosen h — h^/hu leads to a 
decomposition. The algorithm certainly requires an exponential number of 
field operations in the input size because for any / G F[x\ of degree n, 
there are potentially 2" factors of /. Therefore, the cost of the algorithm is 
dominated by the cost of computing step 2.3.2 as many as (2")^ times, each 
time requiring 0{n\ognM {n)) field operations. We have shown the following 
theorem. 
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Theorem 6.7. The normal rational function decomposition problem can be 
solved with 0(2^"n lognM(n)) field operations. 

Using theorem 6.4 we get the foUowing corollary for the general case: 

Corollary 6.8. The rational function decomposition problem can be solved 
with 0(2^"'n^ log nM(n)) field operations. 

7 Conclusion. 

We formally presented the decomposition problem for polynomials (both uni- 
variate and multivariate) in a number of formulations and showed their equiv- 
alence. We then presented a survey of the known algorithms for the decom- 
position problem in light of this consistent mathematical basis. A reduction 
is shown from the general (multiple composition factor) decomposition prob- 
lem to the bidecomposition problem for "nice" classes of polynomials. In 
the wild case wc exhibited super-polynomial lower bound on the number 
of decompositions of a polynomial which can exist by examining the addi- 
tive polynomials, for which all decompositions are wild. We dealt with the 
additive case algorithmically as well, demonstrating a polynomial time al- 
gorithm for generating a complete decomposition (and hence determining 
indccomposability). It is shown that the decomposition problem for additive 
polynomials can be solved in quasi-polynomial time. We also showed that 
the general decomposition problem for completely reducible additive polyno- 
mials and the bidecomposition problem for similarity free additive polynomi- 
als can be solved in polynomial time. The rational function decomposition 
problem is also defined and it is shown how to normalise this problem appro- 
priately, such that the general problem is reducible to the normal one. We 
then showed how to solve the normalised rational function decomposition 
problem in a polynomial number of field operations. 

Many open questions remain in the wild case for polynomial decomposi- 
tion. The additive polynomials represent a small but important subcase of 
these polynomials and yet even here no polynomial time algorithm is known 
for even the bidecomposition problem. It is strongly suspected by the author 
that such an algorithm exists. Interesting questions also remain concerning 
the computation of absolute decompositions. It may be true that even over 
"well-behaved" fields such as finite fields that the coefficients of an absolute 
decomposition generate an extension of exponential degree over the ground 
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field. And of course, tlie main open question is still the existence of a poly- 
nomial time algorithm for the rational polynomial decomposition problem 
in the wild case. The rational function decomposition problem is only dealt 
with briefly here and many interesting questions remain unsolved. Most of 
these problems are extremely difficult, and the mathematical theory is very 
incomplete. Polynomial time algorithms, even for special cases, would be of 
great interest. 
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